CVE-2026-76433

Name of the Vulnerable Software and Affected Versions Cisco ISE (affected versions not specified) Cisco ISE-PIC (affected versions not specified)

Description A flaw in the client provisioning download feature allows an unauthenticated remote attacker to access protected files. The issue stems from insufficient validation of directory traversal character sequences—a technique used to access files and directories outside the intended folder—within a user-supplied path during the processing of provisioning resource requests. An attacker can exploit this by sending a crafted request to the provisioning download service to expose sensitive information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.