cisco-sa-ise-multi-traversal-WDTgYCdnMediumCVSS 5.3

Cisco Identity Services Engine Multiple Path Traversal Vulnerabilities

Published
September 16, 2026
Last Modified
September 16, 2026

🔗 CVE IDs covered (4)

CVE-2026-76431 →CVE-2026-76432 →CVE-2026-76433 →CVE-2026-76434 →

📋 Description

Multiple vulnerabilities in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow a remote attacker to conduct path traversal attacks on an affected device.

For more information about these vulnerabilities, see the Details ["#details"] section of this advisory.

Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.

This advisory is part of a group of advisories. For a complete list of the advisories and links to them, see Cisco Advance Notification for Publication of September 16, 2026, Security Advisories ["https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-jfxK98ZP"]. In addition, for further documentation of improvements and fixes in Cisco Identity Services Engine, see Cisco Identity Services Engine Security Hardening Release: September 2026 ["https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-ise-XU5EwX5T"].

CVE-2026-76431 — Cisco Identity Services Engine Arbitrary File Deletion Vulnerability (CVSS 3.1 4.9, CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N) CVE-2026-76432 — Cisco Identity Services Engine Arbitrary File Write Vulnerability (CVSS 3.1 4.9, CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N) CVE-2026-76433 — Cisco Identity Services Engine Information Disclosure Vulnerability (CVSS 3.1 5.3, CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) CVE-2026-76434 — Cisco Identity Services Engine Arbitrary File Read Vulnerability (CVSS 3.1 4.9, CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N)

🎯 Affected products53

  • Cisco ISE Passive Identity Connector
  • Cisco Identity Services Engine Software
  • Cisco ISE Passive Identity Connector 3.1.0
  • Cisco ISE Passive Identity Connector 3.2.0
  • Cisco ISE Passive Identity Connector 3.3.0
  • Cisco ISE Passive Identity Connector 3.4.0
  • Cisco Identity Services Engine Software 3.1.0
  • Cisco Identity Services Engine Software 3.1.0 p1
  • Cisco Identity Services Engine Software 3.1.0 p10
  • Cisco Identity Services Engine Software 3.1.0 p11
  • Cisco Identity Services Engine Software 3.1.0 p2
  • Cisco Identity Services Engine Software 3.1.0 p3
  • Cisco Identity Services Engine Software 3.1.0 p4
  • Cisco Identity Services Engine Software 3.1.0 p5
  • Cisco Identity Services Engine Software 3.1.0 p6
  • Cisco Identity Services Engine Software 3.1.0 p7
  • Cisco Identity Services Engine Software 3.1.0 p8
  • Cisco Identity Services Engine Software 3.1.0 p9
  • Cisco Identity Services Engine Software 3.2 Patch 10
  • Cisco Identity Services Engine Software 3.2 Patch 8
  • Cisco Identity Services Engine Software 3.2 Patch 9
  • Cisco Identity Services Engine Software 3.2.0
  • Cisco Identity Services Engine Software 3.2.0 p1
  • Cisco Identity Services Engine Software 3.2.0 p2
  • Cisco Identity Services Engine Software 3.2.0 p3
  • Cisco Identity Services Engine Software 3.2.0 p4
  • Cisco Identity Services Engine Software 3.2.0 p5
  • Cisco Identity Services Engine Software 3.2.0 p6
  • Cisco Identity Services Engine Software 3.2.0 p7
  • Cisco Identity Services Engine Software 3.3 Patch 1
  • +23 more not shown

✅ Remediation

Cisco has released software updates that address this vulnerability. https://software.cisco.com Workarounds: There are no workarounds that address these vulnerabilities.

🔗 References (9)