Cisco to publish November 4 advisories for ISE, UCS, and UCM
Fixed releases will be named then, and PSIRT plans no further hardening advisories in 2026.
32
Product
Identity Services Engine
- Mentions · 7d1
- Mentions · 30d1
- All mentions5
- First seenSep 16, 2026
- Last mentioned4d ago
Timeline
5 articles · newest firstCisco Identity Services Engine Authenticated Remote Code Execution and API Vulnerabilities
Cisco fixed ISE vulnerabilities enabling authenticated SQL injection and OS command execution; CVE-2026-20282 and CVE-2026-20283 rated High.
45
Cisco Identity Services Engine Remote Code Execution Vulnerabilities
Cisco patched multiple authenticated remote code execution vulnerabilities in Identity Services Engine that require valid administrative credentials.
40
Cisco Identity Services Engine Vulnerabilities
Cisco patched ISE and ISE-PIC flaws enabling REST API authentication bypass, remote code execution, SQL injection, and XXE attacks.
48
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA added actively exploited CVE-2026-76460 (Cisco Identity Services Engine) and CVE-2026-87886 (Acronis Backup) to its KEV catalog.
68
Related CVEs
by mentions- CVE-2026-7646076%10.0Unauthenticated Management Interface Bypass in Cisco ISE and ISE-PIC
- CVE-2026-87886<1%7.8Incorrect Default Permissions in Acronis Backup Plugin for cPanel & WHM and Plesk Enable Privilege Escalation
- Authenticated OS command injection (RCE) in Cisco ISE IPsec Open API
- Authenticated OS Write-Access Flaw in Cisco Identity Services Engine
Appears with
- Ciscovendor · 5
- Unified Communications Managerproduct · 1
- CISAorganization · 1
- Cisco PSIRTorganization · 1
- ISE Passive Identity Connectorproduct · 1
- UCS Central Softwareproduct · 1
- Acronis Backupproduct · 1
- Acronisvendor · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.