CVE-2026-76446

Name of the Vulnerable Software and Affected Versions Cisco ISE (affected versions not specified) Cisco ISE-PIC (affected versions not specified)

Description An issue in an API of Cisco ISE and Cisco ISE-PIC allows an authenticated, remote attacker to read specific files on the underlying operating system. This occurs due to improper restriction of XML external entity (XXE) references, where XXE is a type of attack that occurs when an XML parser improperly processes external entity references within an XML document. An attacker can exploit this by sending a crafted request to the affected device to access files that the underlying process has permission to read.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.