# Cisco Identity Services Engine


- [CVE-2026-76460](https://insights.sbomify.com/CVE-2026-76460/): Cisco Identity Services Engine Incorrect Use of Privileged APIs (critical 10.0, exploited in the wild)
- [CVE-2025-20337](https://insights.sbomify.com/CVE-2025-20337/): Cisco Identity Services Engine Injection (critical 10.0, exploited in the wild)
- [CVE-2025-20281](https://insights.sbomify.com/CVE-2025-20281/): Cisco Identity Services Engine Injection (critical 10.0, exploited in the wild)
- [CVE-2021-44228](https://insights.sbomify.com/CVE-2021-44228/): Apache Log4j2 Remote Code Execution (critical 10.0, exploited in the wild)
- [CVE-2026-20130](https://insights.sbomify.com/CVE-2026-20130/): Cisco Identity Services Engine Hardening Release - Improper Neutralization Vulnerabilities (critical 10.0)
- [CVE-2026-20192](https://insights.sbomify.com/CVE-2026-20192/): Cisco Identity Services Engine Hardening Release - Access Control Vulnerabilities (critical 10.0)
- [CVE-2025-20282](https://insights.sbomify.com/CVE-2025-20282/): Cisco ISE API Unauthenticated Remote Code Execution Vulnerability (critical 10.0)
- [CVE-2011-3290](https://insights.sbomify.com/CVE-2011-3290/): Hardcoded credentials in n/a (critical 10.0)
- [CVE-2026-20234](https://insights.sbomify.com/CVE-2026-20234/): Cisco Identity Services Engine Hardening Release - Insuffiencently Protected Credential Vulnerabilities (critical 9.9)
- [CVE-2026-20147](https://insights.sbomify.com/CVE-2026-20147/): Cisco Identity Services Engine Remote Code Execution Vulnerability (critical 9.9)
- [CVE-2026-20180](https://insights.sbomify.com/CVE-2026-20180/): Cisco Identity Services Engine Multiple Remote Code Execution Vulnerability (critical 9.9)
- [CVE-2026-20186](https://insights.sbomify.com/CVE-2026-20186/): Cisco Identity Services Engine Multiple Authenticated Remote Code Execution Vulnerability (critical 9.9)

---
From sbomify Insights: https://insights.sbomify.com/products/cisco/identity-services-engine/