Vulnpedia
← All CVEs

CVE-2026-76424

HIGH 7.2 ALL-YEARS

Published 2026-09-16 · Last modified 2026-09-17 · cisco · NVD: Analyzed

A vulnerability in the REST API of Cisco ISE could allow an authenticated, remote attacker to upload or copy arbitrary files on an affected device. This vulnerability is due to insufficient validation in file operations. An attacker could exploit this vulnerability by uploading a file with a crafted path. A successful exploit could allow the attacker to upload files to arbitrary locations and execute arbitrary commands as root on the affected device. To exploit this vulnerability, the attacker must have valid administrative credentials.

ELEVATED IMPACT

Severe if exploited (CVSS 7.2), but no confirmed exploitation. Patch on a normal cadence.

Exploitation likelihood

0.9%chance of exploitation in 30 days · 60th percentile

○ In CISA KEV○ Public exploit / PoC◆ SSVC: exploitation none, automatable no

Impact if exploited

7.2CVSS 3.1 · HIGH · CNA

  • ConfidentialityHigh
  • IntegrityHigh
  • AvailabilityHigh

What an attacker needs

  • ✓Access: Reachable over the network — no local access needed
  • ⚠Privileges: Requires an admin / high-privilege account
  • ✓User interaction: No user interaction needed
  • ✓Complexity: No special conditions — reliably repeatable

✓ lowers the bar for an attacker · ⚠ raises it

Proof of concept & exploit code

No public exploit or proof-of-concept code is catalogued for this CVE (no ExploitDB, Nuclei, or CISA-KEV entry). It may still exist — search GitHub or check the references below.

Affected

Vendors Cisco

Products Cisco Identity Services Engine Software Identity Services Engine

Weakness (CWE)

  • CWE-23: Relative Path Traversal

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Known Affected Software Configurations

VendorProductVersion range
CiscoIdentity Services Engine≥ 3.1.0 and < 3.3.0
CiscoIdentity Services Engine3.3.0
CiscoIdentity Services Engine3.3.0
CiscoIdentity Services Engine3.3.0
CiscoIdentity Services Engine3.3.0
CiscoIdentity Services Engine3.3.0
CiscoIdentity Services Engine3.3.0
CiscoIdentity Services Engine3.3.0
CiscoIdentity Services Engine3.3.0
CiscoIdentity Services Engine3.3.0
CiscoIdentity Services Engine3.3.0
CiscoIdentity Services Engine3.3.0
CiscoIdentity Services Engine3.4.0
CiscoIdentity Services Engine3.4.0
CiscoIdentity Services Engine3.4.0
CiscoIdentity Services Engine3.4.0
CiscoIdentity Services Engine3.4.0
CiscoIdentity Services Engine3.4.0
CiscoIdentity Services Engine3.4.0
CiscoIdentity Services Engine3.5.0
CiscoIdentity Services Engine3.5.0
CiscoIdentity Services Engine3.5.0
CiscoIdentity Services Engine3.5.0

All CVSS metrics

  • HIGH 7.2 v3.1 · CNA Primary
    CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
  • HIGH 7.2 v3.1 · NVD Secondary
    CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

References

Advisories

Sources: NVD · CVE.org · EPSS