CVE-2026-76425

Name of the Vulnerable Software and Affected Versions Cisco ISE (affected versions not specified)

Description Insufficient validation of certain parameters concatenated into SQL queries in the APIs allows an authenticated remote attacker with administrative credentials to perform SQL injection attacks against the backend database. By sending crafted requests to an affected endpoint, an attacker can read arbitrary content from the database and execute server-side request forgery (SSRF) attacks, where the server is coerced into making unauthorized requests to other internal or external systems.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.