CVE-2026-76427

Name of the Vulnerable Software and Affected Versions Cisco ISE (affected versions not specified)

Description An issue in the offline profiler feed service allows an authenticated remote attacker to read arbitrary files from the file system and send requests to internal systems. This occurs because the service uses an XML parser that fails to disable external entity resolution when processing attacker-controlled feed metadata. An attacker with valid administrative credentials can trigger this by uploading a specially crafted offline feed package via the administrative interface.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.