CVE-2026-76446

Published: Sep 16, 2026Modified: Sep 28, 2026

4.9

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Exploitability: 1.2 / Impact: 3.6

Source: psirt@cisco.com (Secondary)

Description

A vulnerability in an API of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to read specific files on the underlying operating system of an affected device. This vulnerability is due to improper restriction of XML external entity references. An attacker could exploit this vulnerability by sending a crafted request to an affected device. A successful exploit could allow the attacker to read specific files on the affected system that the underlying process has permission to access.

Affected (42)

Products: Cisco: Identity Services Engine, Identity Services Engine Passive Identity Connector

Cisco

2 products

Identity Services Engine

Identity Services Engine Passive Identity Connector

Configuration A

23 vulnerable

Vulnerable Software	Affected Versions
Cisco Identity Services Engine	version < 3.3.0
Cisco Identity Services Engine	Version 3.3.0 patch10
Cisco Identity Services Engine	Version 3.3.0 patch11
Cisco Identity Services Engine	Version 3.3.0 patch1
Cisco Identity Services Engine	Version 3.3.0 patch2
Cisco Identity Services Engine	Version 3.3.0 patch3
Cisco Identity Services Engine	Version 3.3.0 patch4
Cisco Identity Services Engine	Version 3.3.0 patch5
Cisco Identity Services Engine	Version 3.3.0 patch6
Cisco Identity Services Engine	Version 3.3.0 patch7
Cisco Identity Services Engine	Version 3.3.0 patch8
Cisco Identity Services Engine	Version 3.3.0 patch9
Cisco Identity Services Engine	Version 3.4.0
Cisco Identity Services Engine	Version 3.4.0 patch1
Cisco Identity Services Engine	Version 3.4.0 patch2
Cisco Identity Services Engine	Version 3.4.0 patch3
Cisco Identity Services Engine	Version 3.4.0 patch4
Cisco Identity Services Engine	Version 3.4.0 patch5
Cisco Identity Services Engine	Version 3.4.0 patch6
Cisco Identity Services Engine	Version 3.5.0
Cisco Identity Services Engine	Version 3.5.0 patch1
Cisco Identity Services Engine	Version 3.5.0 patch2
Cisco Identity Services Engine	Version 3.5.0 patch3

Configuration B

19 vulnerable

Vulnerable Software	Affected Versions
Cisco Identity Services Engine Passive Identity Connector	version < 3.3.0
Cisco Identity Services Engine Passive Identity Connector	Version 3.3.0 patch10
Cisco Identity Services Engine Passive Identity Connector	Version 3.3.0 patch11
Cisco Identity Services Engine Passive Identity Connector	Version 3.3.0 patch1
Cisco Identity Services Engine Passive Identity Connector	Version 3.3.0 patch2
Cisco Identity Services Engine Passive Identity Connector	Version 3.3.0 patch3
Cisco Identity Services Engine Passive Identity Connector	Version 3.3.0 patch4
Cisco Identity Services Engine Passive Identity Connector	Version 3.3.0 patch5
Cisco Identity Services Engine Passive Identity Connector	Version 3.3.0 patch6
Cisco Identity Services Engine Passive Identity Connector	Version 3.3.0 patch7
Cisco Identity Services Engine Passive Identity Connector	Version 3.3.0 patch8
Cisco Identity Services Engine Passive Identity Connector	Version 3.3.0 patch9
Cisco Identity Services Engine Passive Identity Connector	Version 3.4.0
Cisco Identity Services Engine Passive Identity Connector	Version 3.4.0 patch1
Cisco Identity Services Engine Passive Identity Connector	Version 3.4.0 patch2
Cisco Identity Services Engine Passive Identity Connector	Version 3.4.0 patch3
Cisco Identity Services Engine Passive Identity Connector	Version 3.4.0 patch4
Cisco Identity Services Engine Passive Identity Connector	Version 3.4.0 patch5
Cisco Identity Services Engine Passive Identity Connector	Version 3.4.0 patch6

Related CWEs

CWE-611

Improper Restriction of XML External Entity Reference

The product processes an XML document that can contain XML entities with URIs that resolve to documents outside of the intended sphere of control, causing the product to embed incorrect documents into its output.

References (1)

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-multiauth-bypass-sgD2HbL4

Source: psirt@cisco.com

Vendor Advisory

Timeline

No history available yet.