Cisco ISE Auth Bypass & RCE: CVE-2026-76439/76444/76446/76447

Cisco Identity Services Engine Authentication Bypass Vulnerabilities: Key Information Summary Vulnerability Overview Advisory ID: CISCO-2026-76439 Initial Release Date: September 16, 2026, 16:00 GMT Severity Level: Medium CVSS Base Score: 5.3 Vulnerability Types: Authentication Bypass / Remote Code Execution / Information Disclosure / Certificate Re-loading / External Entity Injection Vulnerability Details: - CVE-2026-76439: Insufficient authentication in the endpoint posture status reporting feature; attackers can send crafted requests to manipulate posture status (Remote Code Execution). - CVE-2026-76444: Missing authentication in the Policy Repository Table (PRTT) service, allowing the disclosure of sensitive configuration information. - CVE-2026-76447: Missing authentication in the OCSPP responder, allowing the re-loading of certificates and key material. - CVE-2026-76446: Improper restrictions on XML External Entity (XXE) references in the API; attackers can read specific files on the underlying operating system. Affected Scope Affected Products: - CVE-2026-76439: Affects all Cisco ISE versions (independent of device configuration). - CVE-2026-76444, CVE-2026-76446, CVE-2026-76447: Affect Cisco ISE and Cisco ISE-IP (independent of device configuration). Confirmed Unaffected Products: Only the products listed in the "Vulnerable Products" section of the advisory are known to be affected. Remediation Temporary Mitigations: None (the Workarounds section explicitly states that no temporary mitigations or workarounds are available). Fixed Versions: - Cisco ISE / ISE-IP: - Version 3.2 and earlier → Migration to a fixed version is required - Version 3.3 → 3.3 Patch 12 - Version 3.4 → 3.4 Patch 7 - Version 3.5 → 3.5 Patch 4 - Note: Cisco ISE-IP 3.4 is the end-of-sale (last supported) version. Recommendation: It is strongly recommended that customers upgrade to the fixed software versions listed in the advisory. PoC / Exploit Code The advisory does not include any PoC code or exploit code blocks.

Goal Reached Thanks to every supporter — we hit 100%!

Cisco ISE Auth Bypass & RCE: CVE-2026-76439/76444/76446/76447

More from this source