CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Cisco Identity Services Engine (ISE) Critical Authentication Bypass Vulnerability (CVE-2026-76460)
[Affected Scope] Cisco Identity Services Engine (ISE) web-based management interface and API endpoints.
[Impact] Unauthenticated remote attackers can gain full administrative access to the device by bypassing authentication controls.
[Mitigation] Apply the latest security patches from Cisco immediately and restrict access to management interfaces via ACLs.
Cisco ISE and ISE-PIC Unauthenticated Remote Code Execution Vulnerability Advisory (CVE-2025-20281)
[Affected Scope] Specific API endpoints of Cisco Identity Services Engine (ISE) and Cisco ISE-PIC
[Impact] An unauthenticated, remote attacker can execute arbitrary code with root privileges on the underlying operating system by sending a crafted API request
[Mitigation] Immediately apply the official security patches provided by Cisco and restrict access to the management API ports