CVE-2026-76423

Name of the Vulnerable Software and Affected Versions Cisco ISE (affected versions not specified) Cisco ISE-PIC (affected versions not specified)

Description An authentication bypass exists in the REST API of Cisco ISE and Cisco ISE-PIC due to insufficient authorization checks. A remote, unauthenticated attacker can exploit this by sending a crafted HTTP request to the exposed REST API port, potentially gaining administrative access to read and modify configuration and identity data. Approximately 883,600 instances are identified globally.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.