CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Cisco Identity Services Engine (ISE) Critical Authentication Bypass Vulnerability (CVE-2026-76460)
[Affected Scope] Cisco Identity Services Engine (ISE) web-based management interface and API endpoints.
[Impact] Unauthenticated remote attackers can gain full administrative access to the device by bypassing authentication controls.
[Mitigation] Apply the latest security patches from Cisco immediately and restrict access to management interfaces via ACLs.
Cisco Catalyst SD-WAN Manager Arbitrary File Overwrite and Privilege Escalation Vulnerability (CVE-2026-20122)
[Affected Scope] Cisco Catalyst SD-WAN Manager (formerly vManage) API interface
[Impact] Authenticated remote attackers with read-only API credentials can overwrite arbitrary files on the local file system and gain vmanage user privileges
[Mitigation] Apply official Cisco security patches immediately, restrict API access, and audit API permissions for low-privileged accounts