CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 06:40 UTC )
This week: 5,437 CVEs published, 357 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,437 Show in the list Critical, last 7 days 357 Show in the list Healthcare-tagged, last 7 days 4 Show in the list Known exploited (CISA KEV) 1,747 Show in the list Showing CVEs that name the product cisco:ise_passive_identity_connector . Show all products
27 CVEs, showing 1 to 27
CVE Severity Title Published CVE-2025-20337 Known exploited
Critical 10.0 Cisco ISE API Unauthenticated Remote Code Execution Vulnerability Assigned by cisco
Jul 16, 2025 CVE-2026-20306 Critical 9.1 Cisco Identity Services Engine Command Injection Vulnerability Assigned by cisco
Sep 16, 2026 CVE-2026-20305 Critical 9.1 Cisco Identity Services Engine Command Injection Vulnerability Assigned by cisco
Sep 16, 2026 CVE-2026-20234 Critical 9.9 Cisco Identity Services Engine Hardening Release - Insuffiencently Protected Credential Vulnerabilities Assigned by cisco
Sep 16, 2026 CVE-2026-20194 Critical 9.1 Cisco Identity Services Engine Hardening Release - Incorrect Resource Transfer Vulnerabilities Assigned by cisco
Sep 16, 2026 CVE-2026-20192 Critical 10.0 Cisco Identity Services Engine Hardening Release - Access Control Vulnerabilities Assigned by cisco
Sep 16, 2026 CVE-2026-20130 Critical 10.0 Cisco Identity Services Engine Hardening Release - Improper Neutralization Vulnerabilities Assigned by cisco
Sep 16, 2026 CVE-2026-76423 Critical 10.0 Cisco ISE API Authentication Bypass Vulnerability Assigned by cisco
Sep 16, 2026 CVE-2026-20237 Critical 9.1 Cisco Identity Services Engine Hardening Release - Input Validation Vulnerabilities Assigned by cisco
Sep 16, 2026 CVE-2026-76460 Known exploited
Critical 10.0 Cisco Identity Services Engine Authentication Bypass Vulnerability Assigned by cisco
Sep 16, 2026 CVE-2026-76439 Medium 5.3 Cisco Identity Services Engine Event Injection Vulnerability Assigned by cisco
Sep 16, 2026 CVE-2026-76433 Medium 5.3 Cisco Identity Services Engine Information Disclosure Vulnerability Assigned by cisco
Sep 16, 2026 CVE-2026-76428 Medium 4.9 Cisco ISE Profiler SQL Injection Vulnerability Assigned by cisco
Sep 16, 2026 CVE-2026-76450 Medium 4.9 Cisco Identity Services Engine SQL Injection Vulnerability Assigned by cisco
Sep 16, 2026 CVE-2026-76449 Medium 4.9 Cisco Identity Services Engine SQL Injection Vulnerability Assigned by cisco
Sep 16, 2026 CVE-2026-76451 Medium 4.9 Cisco Identity Services Engine Certificate Management SQL Injection Vulnerability Assigned by cisco
Sep 16, 2026 CVE-2026-76444 Medium 5.3 Cisco Identity Services Engine Information Disclosure Vulnerability Assigned by cisco
Sep 16, 2026 CVE-2026-76434 Medium 4.9 Cisco Identity Services Engine Arbitrary File Read Vulnerability Assigned by cisco
Sep 16, 2026 CVE-2026-76448 Medium 4.9 Cisco Identity Services Engine SQL Injection Vulnerability Assigned by cisco
Sep 16, 2026 CVE-2026-76432 Medium 4.9 Cisco Identity Services Engine Arbitrary File Write Vulnerability Assigned by cisco
Sep 16, 2026 CVE-2026-76446 Medium 4.9 Cisco Identity Services Engine External Entity Injection Vulnerability Assigned by cisco
Sep 16, 2026 CVE-2026-20287 Medium 6.5 Cisco Identity Services Engine Hardening Release - Improper Privlege Management Vulnerabilities Assigned by cisco
Sep 16, 2026 CVE-2026-20285 Medium 4.3 Cisco Identity Services Engine Authorization Bypass Vulnerability Assigned by cisco
Sep 16, 2026 CVE-2026-76447 Medium 5.3 Cisco Identity Services Engine Certificate Reload Vulnerability Assigned by cisco
Sep 16, 2026 CVE-2026-76427 Medium 4.9 Cisco ISE XML External Entity Injection Vulnerability Assigned by cisco
Sep 16, 2026 CVE-2026-76431 Medium 4.9 Cisco Identity Services Engine Arbitrary File Deletion Vulnerability Assigned by cisco
Sep 16, 2026 CVE-2026-76426 Medium 4.9 Cisco ISE REST API SQL Injection Vulnerability Assigned by cisco
Sep 16, 2026
CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
