{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-76444", "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "state": "PUBLISHED", "assignerShortName": "cisco", "dateReserved": "2026-08-19T12:02:03.635Z", "datePublished": "2026-09-16T20:19:12.183Z", "dateUpdated": "2026-09-19T14:21:55.295Z"}, "containers": {"cna": {"title": "Cisco Identity Services Engine Information Disclosure Vulnerability", "metrics": [{"format": "cvssV3_1", "cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "baseScore": 5.3, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "availabilityImpact": "NONE"}}], "descriptions": [{"lang": "en", "value": "A vulnerability in an internal service of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to retrieve sensitive configuration information from an affected device.\r\n\r\nThis vulnerability is due to missing authentication on the Policy Runtime Repository Table (PRRT) service. An attacker could exploit this vulnerability by sending a crafted request to an affected device. A successful exploit could allow the attacker to obtain sensitive configuration information from the affected device."}], "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-multiauth-bypass-sgD2HbL4", "name": "cisco-sa-ise-multiauth-bypass-sgD2HbL4"}], "exploits": [{"lang": "en", "value": "The Cisco PSIRT is aware that a public announcement is available for the vulnerabilities that are described in this advisory.\r\n\r\nThe Cisco PSIRT is not aware of any malicious use of the vulnerabilities that are described in this advisory."}], "source": {"advisory": "cisco-sa-ise-multiauth-bypass-sgD2HbL4", "discovery": "EXTERNAL", "defects": ["CSCwu73786"]}, "problemTypes": [{"descriptions": [{"lang": "en", "description": "Missing Authentication for Critical Function", "type": "cwe", "cweId": "CWE-306"}]}], "affected": [{"vendor": "Cisco", "product": "Cisco Identity Services Engine Software", "versions": [{"version": "3.4.0", "status": "affected"}, {"version": "3.4 Patch 1", "status": "affected"}, {"version": "3.4 Patch 2", "status": "affected"}, {"version": "3.4 Patch 3", "status": "affected"}, {"version": "3.5.0", "status": "affected"}, {"version": "3.4 Patch 4", "status": "affected"}, {"version": "3.5 Patch 1", "status": "affected"}, {"version": "3.4 Patch 5", "status": "affected"}, {"version": "3.5 Patch 3", "status": "affected"}, {"version": "3.5 Patch 2", "status": "affected"}, {"version": "3.4 Patch 6", "status": "affected"}], "defaultStatus": "unknown"}, {"vendor": "Cisco", "product": "Cisco ISE Passive Identity Connector", "versions": [{"version": "3.4.0", "status": "affected"}, {"version": "3.5.0", "status": "affected"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "shortName": "cisco", "dateUpdated": "2026-09-16T20:19:12.183Z"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-76444", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-09-19T13:46:10.724095Z"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-09-19T14:21:55.295Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-76444", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-09-19T13:46:10.724095Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-09-19T14:18:17.227Z"}}], "cna": {"title": "Cisco Identity Services Engine Information Disclosure Vulnerability", "source": {"defects": ["CSCwu73786"], "advisory": "cisco-sa-ise-multiauth-bypass-sgD2HbL4", "discovery": "EXTERNAL"}, "metrics": [{"format": "cvssV3_1", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}}], "affected": [{"vendor": "Cisco", "product": "Cisco Identity Services Engine Software", "versions": [{"status": "affected", "version": "3.4.0"}, {"status": "affected", "version": "3.4 Patch 1"}, {"status": "affected", "version": "3.4 Patch 2"}, {"status": "affected", "version": "3.4 Patch 3"}, {"status": "affected", "version": "3.5.0"}, {"status": "affected", "version": "3.4 Patch 4"}, {"status": "affected", "version": "3.5 Patch 1"}, {"status": "affected", "version": "3.4 Patch 5"}, {"status": "affected", "version": "3.5 Patch 3"}, {"status": "affected", "version": "3.5 Patch 2"}, {"status": "affected", "version": "3.4 Patch 6"}], "defaultStatus": "unknown"}, {"vendor": "Cisco", "product": "Cisco ISE Passive Identity Connector", "versions": [{"status": "affected", "version": "3.4.0"}, {"status": "affected", "version": "3.5.0"}], "defaultStatus": "unknown"}], "exploits": [{"lang": "en", "value": "The Cisco PSIRT is aware that a public announcement is available for the vulnerabilities that are described in this advisory.\r\n\r\nThe Cisco PSIRT is not aware of any malicious use of the vulnerabilities that are described in this advisory."}], "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-multiauth-bypass-sgD2HbL4", "name": "cisco-sa-ise-multiauth-bypass-sgD2HbL4"}], "descriptions": [{"lang": "en", "value": "A vulnerability in an internal service of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to retrieve sensitive configuration information from an affected device.\r\n\r\nThis vulnerability is due to missing authentication on the Policy Runtime Repository Table (PRRT) service. An attacker could exploit this vulnerability by sending a crafted request to an affected device. A successful exploit could allow the attacker to obtain sensitive configuration information from the affected device."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "cwe", "cweId": "CWE-306", "description": "Missing Authentication for Critical Function"}]}], "providerMetadata": {"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "shortName": "cisco", "dateUpdated": "2026-09-16T20:19:12.183Z"}}}, "cveMetadata": {"cveId": "CVE-2026-76444", "state": "PUBLISHED", "dateUpdated": "2026-09-19T14:21:55.295Z", "dateReserved": "2026-08-19T12:02:03.635Z", "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "datePublished": "2026-09-16T20:19:12.183Z", "assignerShortName": "cisco"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unknown", "product": "Cisco Identity Services Engine Software", "vendor": "Cisco", "versions": [{"status": "affected", "version": "3.4.0"}, {"status": "affected", "version": "3.4 Patch 1"}, {"status": "affected", "version": "3.4 Patch 2"}, {"status": "affected", "version": "3.4 Patch 3"}, {"status": "affected", "version": "3.5.0"}, {"status": "affected", "version": "3.4 Patch 4"}, {"status": "affected", "version": "3.5 Patch 1"}, {"status": "affected", "version": "3.4 Patch 5"}, {"status": "affected", "version": "3.5 Patch 3"}, {"status": "affected", "version": "3.5 Patch 2"}, {"status": "affected", "version": "3.4 Patch 6"}]}, {"defaultStatus": "unknown", "product": "Cisco ISE Passive Identity Connector", "vendor": "Cisco", "versions": [{"status": "affected", "version": "3.4.0"}, {"status": "affected", "version": "3.5.0"}]}], "source": "psirt@cisco.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:-:*:*:*:*:*:*", "matchCriteriaId": "CC0525FD-C4D7-4B48-BF35-1791391AB148", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:patch1:*:*:*:*:*:*", "matchCriteriaId": "68C96F6B-51EE-4D03-9598-CBFD16DA22EF", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:patch2:*:*:*:*:*:*", "matchCriteriaId": "62F25185-D19E-4EC5-8A68-7AB669B76E90", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:patch3:*:*:*:*:*:*", "matchCriteriaId": "C457D2EC-FB63-49B7-A90E-CE67ED763BAE", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:patch4:*:*:*:*:*:*", "matchCriteriaId": "6566330F-A048-44A1-9821-7A5844C82CEC", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:patch5:*:*:*:*:*:*", "matchCriteriaId": "1154F196-2CB3-4AC2-BE00-11A8942EA999", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:patch6:*:*:*:*:*:*", "matchCriteriaId": "7E30ECF6-5B1D-4280-AA02-123153E68F28", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.4.0:-:*:*:*:*:*:*", "matchCriteriaId": "D23905E0-E525-49B1-8E5F-4EB42D186768", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch1:*:*:*:*:*:*", "matchCriteriaId": "74509498-38EF-4345-9583-CEF5C26CA1D8", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch2:*:*:*:*:*:*", "matchCriteriaId": "CD05FF93-7B8C-4283-9DB7-E03FE98FAADF", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch3:*:*:*:*:*:*", "matchCriteriaId": "0F9B6A8E-E773-44A3-9266-878F0C58EB41", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch4:*:*:*:*:*:*", "matchCriteriaId": "D3727619-E0CA-4CA9-BE35-0C732BCF1741", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch5:*:*:*:*:*:*", "matchCriteriaId": "2CFB7565-3930-409C-B5DB-CE77E6ED7C42", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch6:*:*:*:*:*:*", "matchCriteriaId": "A388D916-D6A1-4D3A-A48A-A150F387B755", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.5.0:-:*:*:*:*:*:*", "matchCriteriaId": "2610FD35-BC4B-41B7-9C92-E6E5264FEE54", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.5.0:patch1:*:*:*:*:*:*", "matchCriteriaId": "3FEE4377-B238-4442-9892-28CECFB2319E", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.5.0:patch2:*:*:*:*:*:*", "matchCriteriaId": "6598563B-7E32-43FB-96A7-88C53E4CE226", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.5.0:patch3:*:*:*:*:*:*", "matchCriteriaId": "719C8E82-269D-4F21-B2B4-4CD3033A17F9", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A vulnerability in an internal service of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to retrieve sensitive configuration information from an affected device.\r\n\r\nThis vulnerability is due to missing authentication on the Policy Runtime Repository Table (PRRT) service. An attacker could exploit this vulnerability by sending a crafted request to an affected device. A successful exploit could allow the attacker to obtain sensitive configuration information from the affected device."}], "id": "CVE-2026-76444", "lastModified": "2026-09-28T13:06:58.163", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 1.4, "source": "psirt@cisco.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-76444", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-09-19T13:46:10.724095Z", "version": "2.0.3"}}]}, "published": "2026-09-16T21:17:19.463", "references": [{"source": "psirt@cisco.com", "tags": ["Vendor Advisory"], "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-multiauth-bypass-sgD2HbL4"}], "sourceIdentifier": "psirt@cisco.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-306"}], "source": "psirt@cisco.com", "type": "Secondary"}]}

{}