Public mode

No access to your tenant or devices. Every item links to its source. What this means

Sources need attention Customize Public modeDiscuss ChangeIntel on Discord

Cisco ISE REST API SQL Injection Vulnerability

CVSS 3.1 4.9 MEDIUMCheck source for fixed versionsKEV status unknown

cve-program · CVE-2026-76426

Published

A vulnerability in the REST API of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to conduct SQL injection attacks against the monitoring database. This vulnerability is due to insufficient validation of specific parameters that are then concatenated into an SQL statement. An attacker could exploit this vulnerability by sending a crafted request that contains SQL statements in one of the affected parameters. A successful exploit could allow the attacker to read information from the monitoring database. To exploit this vulnerability, the attacker must have valid administrative credentials.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-76426

Published

Cisco Identity Services Engine Software

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Cisco",
                    "product": "Cisco Identity Services Engine Software",
                    "versions": [
                        {
                            "version": "3.1.0",
                            "status": "affected"
                        },
                        {
                            "version": "3.1.0 p1",
                            "status": "affected"
                        },
                        {
                            "version": "3.1.0 p3",
                            "status": "affected"
                        },
                        {
                            "version": "3.1.0 p2",
                            "status": "affected"
                        },
                        {
                            "version": "3.2.0",
                            "status": "affected"
                        },
                        {
                            "version": "3.1.0 p4",
                            "status": "affected"
                        },
                        {
                            "version": "3.1.0 p5",
                            "status": "affected"
                        },
                        {
                            "version": "3.2.0 p1",
                            "status": "affected"
                        },
                        {
                            "version": "3.1.0 p6",
                            "status": "affected"
                        },
                        {
                            "version": "3.2.0 p2",
                            "status": "affected"
                        },
                        {
                            "version": "3.1.0 p7",
                            "status": "affected"
                        },
                        {
                            "version": "3.3.0",
                            "status": "affected"
                        },
                        {
                            "version": "3.2.0 p3",
                            "status": "affected"
                        },
                        {
                            "version": "3.2.0 p4",
                            "status": "affected"
                        },
                        {
                            "version": "3.1.0 p8",
                            "status": "affected"
                        },
                        {
                            "version": "3.2.0 p5",
                            "status": "affected"
                        },
                        {
                            "version": "3.2.0 p6",
                            "status": "affected"
                        },
                        {
                            "version": "3.1.0 p9",
                            "status": "affected"
                        },
                        {
                            "version": "3.3 Patch 2",
                            "status": "affected"
                        },
                        {
                            "version": "3.3 Patch 1",
                            "status": "affected"
                        },
                        {
                            "version": "3.3 Patch 3",
                            "status": "affected"
                        },
                        {
                            "version": "3.4.0",
                            "status": "affected"
                        },
                        {
                            "version": "3.2.0 p7",
                            "status": "affected"
                        },
                        {
                            "version": "3.3 Patch 4",
                            "status": "affected"
                        },
                        {
                            "version": "3.4 Patch 1",
                            "status": "affected"
                        },
                        {
                            "version": "3.1.0 p10",
                            "status": "affected"
                        },
                        {
                            "version": "3.3 Patch 5",
                            "status": "affected"
                        },
                        {
                            "version": "3.3 Patch 6",
                            "status": "affected"
                        },
                        {
                            "version": "3.4 Patch 2",
                            "status": "affected"
                        },
                        {
                            "version": "3.3 Patch 7",
                            "status": "affected"
                        },
                        {
                            "version": "3.4 Patch 3",
                            "status": "affected"
                        },
                        {
                            "version": "3.5.0",
                            "status": "affected"
                        },
                        {
                            "version": "3.4 Patch 4",
                            "status": "affected"
                        },
                        {
                            "version": "3.3 Patch 8",
                            "status": "affected"
                        },
                        {
                            "version": "3.2 Patch 8",
                            "status": "affected"
                        },
                        {
                            "version": "3.5 Patch 1",
                            "status": "affected"
                        },
                        {
                            "version": "3.3 Patch 9",
                            "status": "affected"
                        },
                        {
                            "version": "3.2 Patch 9",
                            "status": "affected"
                        },
                        {
                            "version": "3.4 Patch 5",
                            "status": "affected"
                        },
                        {
                            "version": "3.5 Patch 3",
                            "status": "affected"
                        },
                        {
                            "version": "3.5 Patch 2",
                            "status": "affected"
                        },
                        {
                            "version": "3.3 Patch 10",
                            "status": "affected"
                        },
                        {
                            "version": "3.3 Patch 11",
                            "status": "affected"
                        },
                        {
                            "version": "3.4 Patch 6",
                            "status": "affected"
                        },
                        {
                            "version": "3.2 Patch 10",
                            "status": "affected"
                        },
                        {
                            "version": "3.1.0 p72",
                            "status": "affected"
                        },
                        {
                            "version": "3.1.0 p11",
                            "status": "affected"
                        },
                        {
                            "version": "3.3 Patch 12",
                            "status": "affected"
                        }
                    ],
                    "defaultStatus": "unknown"
                }

Cisco ISE Passive Identity Connector

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Cisco",
                    "product": "Cisco ISE Passive Identity Connector",
                    "versions": [
                        {
                            "version": "3.2.0",
                            "status": "affected"
                        },
                        {
                            "version": "3.1.0",
                            "status": "affected"
                        },
                        {
                            "version": "3.3.0",
                            "status": "affected"
                        },
                        {
                            "version": "3.4.0",
                            "status": "affected"
                        },
                        {
                            "version": "3.5.0",
                            "status": "affected"
                        }
                    ],
                    "defaultStatus": "unknown"
                }

Original source record · Cite this exact observation · Complete original publisher JSON

ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 13 Nov 08:15 UTC · 274 of 275 readable · 272 fully read · documentation 469/469 current