CVE-2026-76434: Cisco Identity Services Engine Multiple Path Traversal Vulnerabilities

1 karet z 1 položek · v celém archivu · celý přehled CZ · EN/orig

CVE-2026-76434

EPSS 0.00 EPSS k 3. 11. 2026

Hodnocení závažnosti

4.9 CVSS 3.1 cisco

útok odkudkoli z internetu bez přípravy nutná práva správce bez zásahu uživatele
dopad plný únik dat beze změny dat bez výpadku
přesah dopad jen na zranitelnou součást

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

zvyšuje závažnost mírně zvyšuje závažnost snižuje závažnost

Cisco Identity Services Engine Multiple Path Traversal Vulnerabilities

Multiple vulnerabilities in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow a remote attacker to conduct path traversal attacks on an affected device. For more information about these vulnerabilities, see the Details section of this advisory. Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities. This advisory is available at the following link:https://sec.cloudapps…

EPSS 0.01 CVE-2026-76431 CVE-2026-76432 CVE-2026-76433 CVE-2026-76434 Cisco US

tg: zranitelnost

· Cisco PSIRT · Cisco Identity Services Engine Multiple Path Traversal Vulnerabilities