EUVD-2026-81124
GHSA-x5qw-hwvr-5f3m
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Description and advisory support unauthenticated network SQLi (AV:N/AC:L/PR:N) with impact limited to database modification (I:H), no read or DoS (C:N/A:N), same-scope backend (S:U).
Primary rating from Vendor (cisco).
CVSS VectorNVD
Lifecycle Timeline
2DescriptionNVD
A vulnerability in Cisco ISE could allow an unauthenticated, remote attacker to conduct SQL injection attacks on an affected device.
This vulnerability is due to improper validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted request to an affected device. A successful exploit could allow the attacker to modify data in the underlying database.
AnalysisAI
Unauthenticated remote SQL injection in Cisco ISE 3.1.x through 3.5.x allows a network attacker to modify data in the product's underlying database via a crafted request, per CVSS 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N). The flaw is CWE-89 improper neutralization of special elements in SQL, and Cisco's advisory plus ENISA EUVD list numerous 3.1.0-3.5 patch levels as affected. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | No special conditions stated - the vendor vector (AV:N/AC:L/PR:N/UI:N) indicates remote unauthenticated exploitation of an affected Cisco ISE device via a single crafted request against default-reachable functionality; no configuration toggle, feature enablement, or user interaction is required per the advisory. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | This is a genuinely notable finding: an unauthenticated, remote SQL injection (CVSS 7.5, AV:N/AC:L/PR:N/UI:N) in Cisco ISE, a ubiquitous enterprise NAC/identity platform. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | No exact fixed version is specified in the supplied data; Cisco's advisory at https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-sql-inj-3QTKR947 is the authoritative source and should be used to identify the patched ISE release for each affected train. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory every Cisco ISE deployment and identify instances running 3.1.x through 3.5.x, then verify whether their management, administrative, and service interfaces are reachable from user, guest, VPN, or other untrusted network segments; where reachability exists, immediately restrict it through network segmentation, ACLs, or firewall rules and route all administration through a hardened jump host or out-of-band management network. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Authentication bypass in Cisco Identity Services Engine (ISE) and ISE Passive Identity Connector lets an unauthenticated
Cisco ISE and Cisco ISE-PIC can be taken over by an unauthenticated, remote attacker who reaches the REST API web servic
Remote, unauthenticated attackers with network access to Cisco Identity Services Engine (ISE) or ISE Passive Identity Co
Improper access control vulnerabilities in Cisco Identity Services Engine (ISE) and ISE Passive Identity Connector (ISE-
Command injection in Cisco Identity Services Engine (ISE) lets an authenticated remote attacker holding only Read-Only A
Command injection in Cisco Identity Services Engine (ISE) and ISE Passive Identity Connector (PIC) allows authenticated
Remote code execution and privilege escalation in Cisco Identity Services Engine allows authenticated attackers with Rea
Authenticated remote command execution in Cisco Identity Services Engine (ISE) and ISE Passive Identity Connector (ISE-P
SQL injection in the SXP REST API of Cisco Identity Services Engine (ISE) lets a remote attacker who already holds valid
Command injection in Cisco Identity Services Engine (ISE) allows an authenticated, high-privileged remote administrator
Improper input validation in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) all
Cisco Identity Services Engine (ISE) and ISE Passive Identity Connector (ISE-PIC) contain multiple internally discovered
Same weakness CWE-89 – SQL Injection
View allShare
External POC / Exploit Code
Leaving vuln.today