Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2026-76444

Cisco Identity Services Engine Information Disclosure Vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
cisco

Description

A vulnerability in an internal service of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to retrieve sensitive configuration information from an affected device. This vulnerability is due to missing authentication on the Policy Runtime Repository Table (PRRT) service. An attacker could exploit this vulnerability by sending a crafted request to an affected device. A successful exploit could allow the attacker to obtain sensitive configuration information from the affected device.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Cisco Cisco Identity Services Engine Software

Default version status: unknown

  • 3.4.0affected
  • 3.4 Patch 1affected
  • 3.4 Patch 2affected
  • 3.4 Patch 3affected
  • 3.5.0affected
  • 3.4 Patch 4affected
  • 3.5 Patch 1affected
  • 3.4 Patch 5affected
  • 3.5 Patch 3affected
  • 3.5 Patch 2affected
  • 3.4 Patch 6affected

Cisco Cisco ISE Passive Identity Connector

Default version status: unknown

  • 3.4.0affected
  • 3.5.0affected

References