CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 08:30 UTC )
This week: 5,432 CVEs published, 355 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,432 Show in the list Critical, last 7 days 355 Show in the list Healthcare-tagged, last 7 days 4 Show in the list Known exploited (CISA KEV) 1,747 Show in the list Showing CVEs that name the product cisco:identity_services_engine_software . Show all products
44 CVEs, showing 1 to 44
CVE Severity Title Published CVE-2025-20281 Known exploited
Critical 10.0 Cisco ISE API Unauthenticated Remote Code Execution Vulnerability Assigned by cisco
Jun 25, 2025 CVE-2025-20337 Known exploited
Critical 10.0 Cisco ISE API Unauthenticated Remote Code Execution Vulnerability Assigned by cisco
Jul 16, 2025 CVE-2026-20306 Critical 9.1 Cisco Identity Services Engine Command Injection Vulnerability Assigned by cisco
Sep 16, 2026 CVE-2026-20305 Critical 9.1 Cisco Identity Services Engine Command Injection Vulnerability Assigned by cisco
Sep 16, 2026 CVE-2026-20307 Critical 9.9 Cisco Identity Services Engine Remote Code Execution Vulnerability Assigned by cisco
Sep 16, 2026 CVE-2026-20234 Critical 9.9 Cisco Identity Services Engine Hardening Release - Insuffiencently Protected Credential Vulnerabilities Assigned by cisco
Sep 16, 2026 CVE-2026-20211 Critical 9.1 Cisco Identity Services Engine Remote Code Execution Vulnerability Assigned by cisco
Sep 16, 2026 CVE-2026-20194 Critical 9.1 Cisco Identity Services Engine Hardening Release - Incorrect Resource Transfer Vulnerabilities Assigned by cisco
Sep 16, 2026 CVE-2026-20192 Critical 10.0 Cisco Identity Services Engine Hardening Release - Access Control Vulnerabilities Assigned by cisco
Sep 16, 2026 CVE-2026-20130 Critical 10.0 Cisco Identity Services Engine Hardening Release - Improper Neutralization Vulnerabilities Assigned by cisco
Sep 16, 2026 CVE-2026-76423 Critical 10.0 Cisco ISE API Authentication Bypass Vulnerability Assigned by cisco
Sep 16, 2026 CVE-2026-20237 Critical 9.1 Cisco Identity Services Engine Hardening Release - Input Validation Vulnerabilities Assigned by cisco
Sep 16, 2026 CVE-2026-20176 Critical 9.1 Cisco Identity Services Engine Remote Code Execution Vulnerability Assigned by cisco
Sep 16, 2026 CVE-2026-20352 High 8.6 Cisco Identity Services Engine RADIUS Denial of Service Vulnerability Assigned by cisco
Sep 16, 2026 CVE-2026-76460 Known exploited
Critical 10.0 Cisco Identity Services Engine Authentication Bypass Vulnerability Assigned by cisco
Sep 16, 2026 CVE-2026-20247 High 7.5 Cisco Identity Services Engine Unauthenticated SQL Injection Vulnerability Assigned by cisco
Sep 16, 2026 CVE-2026-76424 High 7.2 Cisco ISE Arbitrary File Access Vulnerability Assigned by cisco
Sep 16, 2026 CVE-2026-20284 Critical 9.1 Cisco Identity Search Engine SXP REST API SQL Injection Vulnerability Assigned by cisco
Sep 16, 2026 CVE-2026-76425 High 7.6 Cisco ISE SQL Injection Vulnerability Assigned by cisco
Sep 16, 2026 CVE-2026-20283 Medium 6.5 Cisco Identity Services Engine IPSec Open API Command Injection Vulnerability Assigned by cisco
Sep 16, 2026 CVE-2026-20282 Medium 4.9 Cisco Identity Services Engine Authenticated Write Vulnerability Assigned by cisco
Sep 16, 2026 CVE-2026-76439 Medium 5.3 Cisco Identity Services Engine Event Injection Vulnerability Assigned by cisco
Sep 16, 2026 CVE-2026-76433 Medium 5.3 Cisco Identity Services Engine Information Disclosure Vulnerability Assigned by cisco
Sep 16, 2026 CVE-2026-76428 Medium 4.9 Cisco ISE Profiler SQL Injection Vulnerability Assigned by cisco
Sep 16, 2026 CVE-2026-20309 Medium 6.1 Cisco Identity Services Engine Cross-Site Scripting Vulnerability Assigned by cisco
Sep 16, 2026 CVE-2026-76450 Medium 4.9 Cisco Identity Services Engine SQL Injection Vulnerability Assigned by cisco
Sep 16, 2026 CVE-2026-76449 Medium 4.9 Cisco Identity Services Engine SQL Injection Vulnerability Assigned by cisco
Sep 16, 2026 CVE-2026-20235 Medium 4.9 Cisco Identity Services Engine Information Disclosure Vulnerability Assigned by cisco
Sep 16, 2026 CVE-2026-76451 Medium 4.9 Cisco Identity Services Engine Certificate Management SQL Injection Vulnerability Assigned by cisco
Sep 16, 2026 CVE-2026-76444 Medium 5.3 Cisco Identity Services Engine Information Disclosure Vulnerability Assigned by cisco
Sep 16, 2026 CVE-2026-76434 Medium 4.9 Cisco Identity Services Engine Arbitrary File Read Vulnerability Assigned by cisco
Sep 16, 2026 CVE-2026-76448 Medium 4.9 Cisco Identity Services Engine SQL Injection Vulnerability Assigned by cisco
Sep 16, 2026 CVE-2026-76432 Medium 4.9 Cisco Identity Services Engine Arbitrary File Write Vulnerability Assigned by cisco
Sep 16, 2026 CVE-2026-20300 High 7.1 Cisco Identity Services Engine SQL Injection Vulnerability Assigned by cisco
Sep 16, 2026 CVE-2026-20071 Low 3.8 ISE 802.1x Session Hijack Vulnerability Assigned by cisco
Sep 16, 2026 CVE-2026-76446 Medium 4.9 Cisco Identity Services Engine External Entity Injection Vulnerability Assigned by cisco
Sep 16, 2026 CVE-2026-20072 Medium 4.9 ISE information disclosure Assigned by cisco
Sep 16, 2026 CVE-2026-20286 Medium 4.3 Cisco Identity Services Engine Authorization Bypass Vulnerability Assigned by cisco
Sep 16, 2026 CVE-2026-20287 Medium 6.5 Cisco Identity Services Engine Hardening Release - Improper Privlege Management Vulnerabilities Assigned by cisco
Sep 16, 2026 CVE-2026-20285 Medium 4.3 Cisco Identity Services Engine Authorization Bypass Vulnerability Assigned by cisco
Sep 16, 2026 CVE-2026-76447 Medium 5.3 Cisco Identity Services Engine Certificate Reload Vulnerability Assigned by cisco
Sep 16, 2026 CVE-2026-76427 Medium 4.9 Cisco ISE XML External Entity Injection Vulnerability Assigned by cisco
Sep 16, 2026 CVE-2026-76431 Medium 4.9 Cisco Identity Services Engine Arbitrary File Deletion Vulnerability Assigned by cisco
Sep 16, 2026 CVE-2026-76426 Medium 4.9 Cisco ISE REST API SQL Injection Vulnerability Assigned by cisco
Sep 16, 2026
CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
