Cisco ISE Passive Identity Connector vulnerabilities

Product

Cisco ISE Passive Identity Connector

by Cisco · last CVE Sep 16, 2026

On CISA KEVExploited in the wild

CVEs

On KEV

10.0

Max CVSS

New 30D

Vulnerabilities35 In the news12 Timeline

Severity mix

Critical 12High 3Medium 20Low 0

Severity

All severities35 Critical12 High3 Medium20 Low0

Exploitation

On CISA KEV2 Exploited in the wild2

Watch

Add Cisco ISE Passive Identity Connector to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-76460 In wildKEV	10.0	76%	Sep 16	Cisco Identity Services Engine Authentication Bypass Vulnerability Affected: 3.4.0; 3.5.0
CVE-2025-20337 In wildKEV	10.0	74%	Jul 16	Cisco ISE API Unauthenticated Remote Code Execution Vulnerability Affected: 3.2.0; 3.1.0; 3.3.0; 3.4.0
CVE-2026-76423	10.0	1%	Sep 16	Cisco ISE API Authentication Bypass Vulnerability Affected: 3.2.0; 3.1.0; 3.3.0; 3.4.0; 3.5.0
CVE-2026-20130	10.0	1%	Sep 16	Cisco Identity Services Engine Hardening Release - Improper Neutralization Vulnerabilities Affected: 3.2.0; 3.1.0; 3.3.0; 3.4.0; 3.5.0
CVE-2026-20192	10.0	0%	Sep 16	Cisco Identity Services Engine Hardening Release - Access Control Vulnerabilities Affected: 3.2.0; 3.1.0; 3.3.0; 3.4.0; 3.5.0
CVE-2026-20234	9.9	0%	Sep 16	Cisco Identity Services Engine Hardening Release - Insuffiencently Protected Credential Vulnerabilities Affected: 3.2.0; 3.1.0; 3.3.0; 3.4.0; 3.5.0
CVE-2026-20147	9.9	10%	Apr 15	Cisco Identity Services Engine Remote Code Execution Vulnerability Affected: 3.2.0; 3.1.0; 3.3.0; 3.4.0
CVE-2026-20237	9.1	0%	Sep 16	Cisco Identity Services Engine Hardening Release - Input Validation Vulnerabilities Affected: 3.2.0; 3.1.0; 3.3.0; 3.4.0; 3.5.0
CVE-2026-20194	9.1	0%	Sep 16	Cisco Identity Services Engine Hardening Release - Incorrect Resource Transfer Vulnerabilities Affected: 3.2.0; 3.1.0; 3.3.0; 3.4.0; 3.5.0
CVE-2026-20305	9.1	2%	Sep 16	Cisco Identity Services Engine Command Injection Vulnerability Affected: 3.2.0; 3.1.0; 3.3.0; 3.4.0
CVE-2026-20306	9.1	2%	Sep 16	Cisco Identity Services Engine Command Injection Vulnerability Affected: 3.4.0
CVE-2026-20181	9.1	9%	Jun 17	Cisco Identity Services Engine Remote Code Execution Vulnerability Affected: 3.2.0; 3.1.0; 3.3.0; 3.4.0; 3.5.0