/
← Voltar ao feed
medium

Cisco ISE and ISE-PIC authentication bypass vulnerabilities allow remote data access and manipulation (4 CVEs)

1 fonte(s) · 1 atualização(ões) · publicado 24/09/2026 14:16 · coletado há 1 dia

Baseado só no resumo do feed. O site da fonte não liberou o texto completo para o Tifon, então esta análise saiu apenas do resumo publicado no feed e pode estar incompleta. Ela é atualizada quando outra fonte cobrir o assunto. Ler na fonte original ↗

Cisco has disclosed multiple vulnerabilities in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) that could let a remote attacker access or manipulate data, obtain sensitive information, or cause a reload of certificate and key material on an affected device. The advisory (cisco-sa-ise-multiauth-bypass-sgD2HbL4) rates the security impact as Medium and covers CVE-2026-76439, CVE-2026-76444, CVE-2026-76446 and CVE-2026-76447. It is part of a group of advisories from Cisco's September 2026 publication cycle. The article does not mention active exploitation or attribution.

Technical Details

  • The advisory title refers to authentication bypass, and the impact is remote access to or manipulation of data, information disclosure, and a reload of certificate and key material.
  • The article gives no per-CVE details, affected version ranges or attack prerequisites; these are in the Details section of the full advisory.

Remediation

  • Cisco has released software updates that address these vulnerabilities.
  • There are no workarounds, so patching is the only mitigation.
  • Cisco also points to the Cisco Identity Services Engine Security Hardening Release: September 2026 for related improvements and fixes.

Linha do tempo

  1. sec.cloudapps.cisco.com ↗ · pub. 24/09/2026 14:16 · coletado 19/10 18:02 primeiro registro só resumo do feed

    Cisco ISE and ISE-PIC authentication bypass vulnerabilities allow remote data access and manipulation (4 CVEs)

    ler a análise desta fonte

    Cisco has disclosed multiple vulnerabilities in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) that could let a remote attacker access or manipulate data, obtain sensitive information, or cause a reload of certificate and key material on an affected device. The advisory (cisco-sa-ise-multiauth-bypass-sgD2HbL4) rates the security impact as Medium and covers CVE-2026-76439, CVE-2026-76444, CVE-2026-76446 and CVE-2026-76447. It is part of a group of advisories from Cisco's September 2026 publication cycle. The article does not mention active exploitation or attribution.

    Technical Details

    • The advisory title refers to authentication bypass, and the impact is remote access to or manipulation of data, information disclosure, and a reload of certificate and key material.
    • The article gives no per-CVE details, affected version ranges or attack prerequisites; these are in the Details section of the full advisory.

    Remediation

    • Cisco has released software updates that address these vulnerabilities.
    • There are no workarounds, so patching is the only mitigation.
    • Cisco also points to the Cisco Identity Services Engine Security Hardening Release: September 2026 for related improvements and fixes.