CVE-2026-76460
Status: AnalyzedCritical (10)⚠ Active exploitation
A vulnerability in an API of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to bypass authentication.
This vulnerability is due to insufficient authentication control on an API endpoint. An attacker could exploit this vulnerability by sending a crafted request to an affected API endpoint. A successful exploit could allow the attacker to gain unauthorized access to the affected device by bypassing the web-based management interface.
CVSS
- Version: 3.1
- Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
- Base score: 10
Exploitation probability (EPSS)
- Probability of exploitation in the next 30 days: 14%
- Percentile among all scored CVEs: 96
- Score date: 9/30/2026
EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).
CISA KEV — actively exploited
- Added to catalog: 9/16/2026
- Remediation due date: 9/19/2026
- Known ransomware use: Unknown
Affected technologies (2)
CWEs
- CWE-648
References
Raw JSON (NVD)
Show
{
"id": "CVE-2026-76460",
"cveTags": [],
"metrics": {
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2026-76460",
"role": "CISA Coordinator",
"options": [
{
"exploitation": "active"
},
{
"automatable": "yes"
},
{
"technicalImpact": "total"
}
],
"version": "2.0.3",
"timestamp": "2026-09-16T00:00:00+00:00"
}
}
],
"cvssMetricV31": [
{
"type": "Secondary",
"source": "psirt@cisco.com",
"cvssData": {
"scope": "CHANGED",
"version": "3.1",
"baseScore": 10,
"attackVector": "NETWORK",
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "HIGH"
},
"impactScore": 6,
"exploitabilityScore": 3.9
}
]
},
"affected": [
{
"source": "psirt@cisco.com",
"affectedData": [
{
"vendor": "Cisco",
"product": "Cisco Identity Services Engine Software",
"versions": [
{
"status": "affected",
"version": "3.1.0 p8"
},
{
"status": "affected",
"version": "3.1.0 p9"
},
{
"status": "affected",
"version": "3.3 Patch 2"
},
{
"status": "affected",
"version": "3.3 Patch 1"
},
{
"status": "affected",
"version": "3.3 Patch 3"
},
{
"status": "affected",
"version": "3.4.0"
},
{
"status": "affected",
"version": "3.2.0 p7"
},
{
"status": "affected",
"version": "3.3 Patch 4"
},
{
"status": "affected",
"version": "3.4 Patch 1"
},
{
"status": "affected",
"version": "3.1.0 p10"
},
{
"status": "affected",
"version": "3.3 Patch 5"
},
{
"status": "affected",
"version": "3.3 Patch 6"
},
{
"status": "affected",
"version": "3.4 Patch 2"
},
{
"status": "affected",
"version": "3.3 Patch 7"
},
{
"status": "affected",
"version": "3.4 Patch 3"
},
{
"status": "affected",
"version": "3.5.0"
},
{
"status": "affected",
"version": "3.4 Patch 4"
},
{
"status": "affected",
"version": "3.3 Patch 8"
},
{
"status": "affected",
"version": "3.2 Patch 8"
},
{
"status": "affected",
"version": "3.5 Patch 1"
},
{
"status": "affected",
"version": "3.3 Patch 9"
},
{
"status": "affected",
"version": "3.2 Patch 9"
},
{
"status": "affected",
"version": "3.4 Patch 5"
},
{
"status": "affected",
"version": "3.5 Patch 3"
},
{
"status": "affected",
"version": "3.5 Patch 2"
},
{
"status": "affected",
"version": "3.3 Patch 10"
},
{
"status": "affected",
"version": "3.3 Patch 11"
},
{
"status": "affected",
"version": "3.4 Patch 6"
},
{
"status": "affected",
"version": "3.2 Patch 10"
},
{
"status": "affected",
"version": "3.1.0 p11"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Cisco",
"product": "Cisco ISE Passive Identity Connector",
"versions": [
{
"status": "affected",
"version": "3.4.0"
},
{
"status": "affected",
"version": "3.5.0"
}
],
"defaultStatus": "unknown"
}
]
}
],
"published": "2026-09-16T21:17:21.430",
"references": [
{
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ISE-ABP-VNSW7Tn5",
"tags": [
"Mitigation",
"Vendor Advisory"
],
"source": "psirt@cisco.com"
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-76460",
"tags": [
"US Government Resource"
],
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
],
"vulnStatus": "Analyzed",
"weaknesses": [
{
"type": "Secondary",
"source": "psirt@cisco.com",
"description": [
{
"lang": "en",
"value": "CWE-648"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in an API of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to bypass authentication.\r\n\r\nThis vulnerability is due to insufficient authentication control on an API endpoint. An attacker could exploit this vulnerability by sending a crafted request to an affected API endpoint. A successful exploit could allow the attacker to gain unauthorized access to the affected device by bypassing the web-based management interface."
}
],
"lastModified": "2026-09-25T16:53:35.463",
"cisaActionDue": "2026-09-19",
"cisaExploitAdd": "2026-09-16",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7A789B44-7E6C-4FE9-BD40-702A871AB8AC"
},
{
"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "93920663-445E-4456-A905-81CEC6CA1833"
},
{
"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch10:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DF9CCBFA-0004-48F7-B142-6FDD4B3E1081"
},
{
"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch11:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C91717BE-76EF-410C-970D-01C5FDC52A0B"
},
{
"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "33DA5BB8-4CFE-44BD-9CEB-BC26577E8477"
},
{
"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D3AEFA85-66B5-4145-A4AD-96D1FF86B46D"
},
{
"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7A6A0697-6A9E-48EF-82D8-36C75E0CDFDC"
},
{
"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch5:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E939B65A-7912-4C36-8799-03A1526D7BD3"
},
{
"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch6:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "833B438F-0869-4C0D-9952-750C00702E8D"
},
{
"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch7:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E8B2588D-01F9-450B-B2E3-ADC4125E354E"
},
{
"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch8:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E41016C0-19E6-4BCC-A8DD-F6C9A2B0003E"
},
{
"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch9:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "654E946A-07C5-4036-BC54-85EF42B808DD"
},
{
"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2.0:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7932D5D5-83E1-4BEF-845A-D0783D4BB750"
},
{
"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1B818846-4A6E-4256-B344-281E8C786C43"
},
{
"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch10:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1EEC9040-9BD3-43D0-A33E-1EBD941EB65F"
},
{
"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A44858A2-922A-425A-8B38-0C47DB911A3C"
},
{
"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "53484A32-757B-42F8-B655-554C34222060"
},
{
"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0CCAC61F-C273-49B3-A631-31D3AE3EB148"
},
{
"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch5:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "51AEFCE6-FB4A-4B1C-A23D-83CC3CF3FBBD"
},
{
"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch6:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B452B4F0-8510-475E-9AE8-B48FABB4D7D3"
},
{
"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch7:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5733512D-12B5-4098-AF90-9D68217FAC27"
},
{
"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch8:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4ED98020-7BAF-4E5E-8B7B-22537200C283"
},
{
"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch9:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4C6839DC-F3A2-4133-BF60-2E678E6DD4A4"
},
{
"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F1B9C2C1-59A4-49A0-9B74-83CCB063E55D"
},
{
"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DFD29A0B-0D75-4EAB-BCE0-79450EC75DD0"
},
{
"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch10:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "43F3A55D-D4FC-4D93-9513-94B64B21A2B4"
},
{
"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch11:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F0F60A00-E952-400A-B553-BE96E7FF746F"
},
{
"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E6C94CC4-CC08-4DAF-A606-FDAFC92720A9"
},
{
"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BB069EA3-7B8C-42B5-8035-2EE5ED3F56E4"
},
{
"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FF8B81A6-BF44-4E5F-B167-39F61DDCA026"
},
{
"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch5:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "56E0F0EC-3E66-4866-89F5-89B331F3F517"
},
{
"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch6:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2E3E8937-2859-4A2A-91C0-05F674EF0466"
},
{
"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch7:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D4B14684-EB9E-405B-85FA-B62E57CB292C"
},
{
"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch8:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "22B752D1-9E8F-4FB7-8EEB-F9234492372B"
},
{
"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch9:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "85A1CC7D-FE54-4AC0-B98F-972C4B1F3189"
},
{
"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.4.0:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D23905E0-E525-49B1-8E5F-4EB42D186768"
},
{
"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "74509498-38EF-4345-9583-CEF5C26CA1D8"
},
{
"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CD05FF93-7B8C-4283-9DB7-E03FE98FAADF"
},
{
"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0F9B6A8E-E773-44A3-9266-878F0C58EB41"
},
{
"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D3727619-E0CA-4CA9-BE35-0C732BCF1741"
},
{
"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch5:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2CFB7565-3930-409C-B5DB-CE77E6ED7C42"
},
{
"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch6:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A388D916-D6A1-4D3A-A48A-A150F387B755"
},
{
"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.5.0:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2610FD35-BC4B-41B7-9C92-E6E5264FEE54"
},
{
"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.5.0:patch1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3FEE4377-B238-4442-9892-28CECFB2319E"
},
{
"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.5.0:patch2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6598563B-7E32-43FB-96A7-88C53E4CE226"
},
{
"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.5.0:patch3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "719C8E82-269D-4F21-B2B4-4CD3033A17F9"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "006E0D77-534C-447F-8E97-EC0AB906D978"
},
{
"criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AC07A742-D194-425C-945C-3977E96B61B8"
},
{
"criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch10:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "00D4B446-EDCE-41DC-A03B-97D8A371B0D9"
},
{
"criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch11:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BE3B2985-AC34-4628-8564-517C48B9F475"
},
{
"criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "97787372-9A0D-4916-A7A2-19237B84419F"
},
{
"criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2E2D9D7C-A36E-489D-A2E1-ACE9E9C399BD"
},
{
"criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3ABA57DA-78C9-489B-88E5-6E5275E53388"
},
{
"criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch5:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2ABFB0CE-60CF-4969-A91E-186F457C8014"
},
{
"criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch6:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B8CF7EF0-FBAA-47C7-8386-F67264CA8D0E"
},
{
"criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch7:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5F08ACD7-2867-428A-966C-6509283FCA10"
},
{
"criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch8:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B365970F-9239-45F8-80C6-DA426FCA2E32"
},
{
"criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch9:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5A66142F-712F-4EFA-9FC4-E499D3015DD2"
},
{
"criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "50D8B7DD-14A8-4C67-8B32-E1F9C7D9C01E"
},
{
"criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:patch1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CB65DFF8-33D8-4840-8A63-7C4797FF0B51"
},
{
"criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:patch10:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9CAAF565-E1CF-4002-B91C-290ECAB2F16A"
},
{
"criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:patch2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "890FDA62-DED9-401B-9D44-26F3624118CD"
},
{
"criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:patch3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "604079BA-78F5-4D20-AF27-E7A9A899DA0C"
},
{
"criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:patch4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "25344C6F-8EB6-4709-A51B-DCA26AA885E3"
},
{
"criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:patch5:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "51DE5AD0-5DFA-460D-B22D-0F5E367A9A28"
},
{
"criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:patch6:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "683F2E87-9759-4A98-B7C9-489E74837D59"
},
{
"criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:patch7:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "22BF8687-84E4-4609-8100-FD2408DF3247"
},
{
"criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:patch8:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "19F88640-BC3E-42D2-ADDC-59114974103C"
},
{
"criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:patch9:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "40A94055-EF01-4799-813D-7BFFDD13C685"
},
{
"criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3CA3315D-8A45-43F4-A0F0-094D325F285B"
},
{
"criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B3736136-9FD8-4B12-B119-EA15201224D9"
},
{
"criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch10:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FB15AE6D-F4EF-40AD-A88E-D22612AEF2A4"
},
{
"criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch11:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "25B8E5EB-393A-40E8-9A0D-465ECCC2A4B8"
},
{
"criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "654ED77E-22D3-4E76-9E6D-B1581F5982F0"
},
{
"criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A0648EE9-F042-479F-9AAB-C6B5DBC46511"
},
{
"criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "83F3BA58-4F38-41C8-956F-38A2F44EECE4"
},
{
"criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch5:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6C30FA1D-91E2-48C5-B181-A88FDF668278"
},
{
"criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch6:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "768215B1-80B7-40FF-8772-BA4C0B3913F5"
},
{
"criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch7:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "40239DA8-43B6-466B-85B0-6D644D7027D1"
},
{
"criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch8:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9118B7ED-E678-47C3-9D17-F522D9362B2F"
},
{
"criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch9:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C2ED3257-CB9D-4FD5-A482-3648CF292128"
},
{
"criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CC0525FD-C4D7-4B48-BF35-1791391AB148"
},
{
"criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:patch1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "68C96F6B-51EE-4D03-9598-CBFD16DA22EF"
},
{
"criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:patch2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "62F25185-D19E-4EC5-8A68-7AB669B76E90"
},
{
"criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:patch3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C457D2EC-FB63-49B7-A90E-CE67ED763BAE"
},
{
"criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:patch4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6566330F-A048-44A1-9821-7A5844C82CEC"
},
{
"criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:patch5:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1154F196-2CB3-4AC2-BE00-11A8942EA999"
},
{
"criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:patch6:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7E30ECF6-5B1D-4280-AA02-123153E68F28"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "psirt@cisco.com",
"cisaRequiredAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
"cisaVulnerabilityName": "Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability"
}