CVE-2026-76428
Description
A vulnerability in the REST APIs of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to conduct SQL injection attacks against the session database. This vulnerability is due to certain parameters being concatenated directly into SQL clauses without parameterization. An attacker could exploit this vulnerability by sending a crafted request that contains SQL statements in one of the affected parameters. A successful exploit could allow the attacker to read information from the session database. To exploit this vulnerability, the attacker must have valid administrative credentials.
How to fix
- cisco identity_services_engine3.3.0 or later
- cisco identity_services_engine_passive_identity_connector3.3.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco identity_services_engine | 3.1.0 ≤ v < 3.3.0, 3.3.0, 3.4.0, 3.5.0 | 3.3.0 |
| cisco identity_services_engine_passive_identity_connector | 3.1.0 ≤ v < 3.3.0, 3.3.0, 3.4.0 | 3.3.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.