Identity & Access
CVE-2026-76434: Cisco ISE Arbitrary File Read Vulnerability
An ISE or ISE-PIC administrator can read arbitrary files through certificate import. Install the CVE-specific update and assess earlier import requests; the description supports file disclosure, not command execution from importing a certificate.
CVE-2026-76439: Cisco ISE Event Injection Vulnerability
Unauthenticated guest-portal requests can forge ISE endpoint posture-status events. Apply the specific update and preserve posture history; the reviewed description establishes status manipulation, not operating-system command execution despite the inconsistent heading.
CVE-2026-76444: Cisco ISE Information Disclosure Vulnerability
Missing authentication on the ISE and ISE-PIC PRRT service can expose sensitive configuration. Check that internal service's reachability and install the CVE-specific fix; the stated impact is disclosure, not administrative configuration changes.
CVE-2026-76446: Cisco ISE External Entity Injection Vulnerability
A privileged authenticated request can use XML external entities to read files through an ISE or ISE-PIC API. Apply the specific fix; accessible files remain constrained by the underlying process's permissions.
CVE-2026-76447: Cisco ISE Certificate Reload Vulnerability
Unauthenticated requests can force the ISE or ISE-PIC OCSP responder to reload certificate and key material. Update and review unexpected reloads; this is an availability concern, not established private-key theft or certificate replacement.
CVE-2026-76448: Cisco Identity Services Engine SQL Injection Vulnerability
Cisco ISE and ISE-PIC database injection requires administrative credentials. Follow this advisory's own patch or migration mapping, including ISE-PIC's 3.4 support limit, rather than borrowing fixes or impacts from neighboring vulnerabilities.
CVE-2026-20352: Cisco Identity Services Engine RADIUS Denial of Service Vulnerability
Crafted RADIUS requests can make an ISE node unavailable and block new endpoint authentication. Check each Policy Service Node and Session Services state; disabling that service on a RADIUS node also disables legitimate RADIUS access.
CVE-2026-76423: Cisco ISE REST API Authentication Bypass Vulnerability
Unauthenticated REST API requests can read or modify ISE and ISE-PIC configuration and identity data with administrative privileges. Inventory both products, apply the CVE-specific fix, and review API exposure and activity.
CVE-2026-76424: Cisco ISE Arbitrary File Access Vulnerability
An ISE administrator can use crafted REST API paths to place files and potentially execute root commands. Apply the ISE-specific fix and investigate files already uploaded or copied; a successful update does not establish their removal.
CVE-2026-20247: Cisco ISE Unauthenticated SQL Injection Vulnerability
Unauthenticated SQL injection can modify Cisco ISE database contents. Apply the CVE-specific patch and investigate earlier data changes separately; the reviewed impact does not establish database disclosure or operating-system control.