CVE-2026-76433

MediumCVSS 5.3/10Last modified Sep 28, 2026

Description

A vulnerability in the client provisioning download feature of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to access protected files on an affected device. This vulnerability is due to insufficient validation of directory traversal character sequences in a user-supplied path when the software processes provisioning resource requests. An attacker could exploit this vulnerability by sending a crafted request to the provisioning download service. A successful exploit could allow the attacker to access protected files without authentication, potentially exposing sensitive information.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-22

Affected software

VendorProductVersions
CiscoCisco Identity Services Engine Software3.1.0; 3.1.0 p1; 3.1.0 p3; 3.1.0 p2; 3.2.0; 3.1.0 p4; 3.1.0 p5; 3.2.0 p1; 3.1.0 p6; 3.2.0 p2; 3.1.0 p7; 3.3.0; 3.2.0 p3; 3.2.0 p4; 3.1.0 p8; 3.2.0 p5; 3.2.0 p6; 3.1.0 p9; 3.3 Patch 2; 3.3 Patch 1
CiscoCisco ISE Passive Identity Connector3.2.0; 3.1.0; 3.3.0; 3.4.0; 3.5.0

References

Timeline

Published
Sep 16, 2026
Last modified
Sep 28, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-764344.9A vulnerability in the certificate import functionality of the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an CVE-2026-764355.3A vulnerability in Cisco Expressway Series could allow an unauthenticated, remote attacker to obtain sensitive information from an affected CVE-2026-764374.9A vulnerability in the web-based user interface of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), couldCVE-2026-764386.5A vulnerability in the web-based management interface of Cisco BroadWorks CommPilot Application Software could allow an authenticated, remotCVE-2026-764395.3A vulnerability in the endpoint posture status reporting functionality of the guest portal web application of Cisco ISE could allow an unautCVE-2026-76447.3A vulnerability has been found in ChatGPTNextWeb NextChat up to 2.16.1. Affected is the function addMcpServer of the file app/mcp/actions.tsCVE-2026-764409.8As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and WCVE-2026-764419.8As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and WCVE-2026-764427.5As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and WCVE-2026-764439.8As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and WCVE-2026-764445.3A vulnerability in an internal service of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to retrieve sensitive CVE-2026-764455.3Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker
CVE-2026-76433: Medium severity, CVSS 5.3 | Vulnix