Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-77266 | medium | 6.5 | No | MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, upload_attachment acce... | 2026-09-28 |
| CVE-2026-76439 | medium | 5.3 | No | A vulnerability in the endpoint posture status reporting functionality of the guest portal web application of Cisco ISE could allow an unaut... | 2026-09-28 |
| CVE-2026-76446 | medium | 4.9 | No | A vulnerability in an API of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to read specific files on the underly... | 2026-09-28 |
| CVE-2026-76428 | medium | 4.9 | No | A vulnerability in the REST APIs of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to conduct SQL injection attac... | 2026-09-28 |
| CVE-2026-77272 | medium | 6.1 | No | MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the OAuth error query... | 2026-09-28 |
| CVE-2026-76447 | medium | 5.3 | No | A vulnerability in the Online Certificate Status Protocol (OCSP) responder of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, re... | 2026-09-28 |
| CVE-2026-76444 | medium | 5.3 | No | A vulnerability in an internal service of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to retrieve sensitive... | 2026-09-28 |
| CVE-2026-76449 | medium | 4.9 | No | A vulnerability in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, rem... | 2026-09-28 |
| CVE-2026-76450 | medium | 4.9 | No | A vulnerability in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, rem... | 2026-09-28 |
| CVE-2026-76451 | medium | 4.9 | No | A vulnerability in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, rem... | 2026-09-28 |
| CVE-2026-76448 | medium | 4.9 | No | A vulnerability in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, rem... | 2026-09-28 |
| CVE-2026-20234 | critical | 9.9 | No | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE) and Cisco ISE Pass... | 2026-09-28 |
| CVE-2026-20130 | critical | 10.0 | No | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE) and Cisco ISE Pass... | 2026-09-28 |
| CVE-2026-20192 | critical | 10.0 | No | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE) and Cisco ISE Pass... | 2026-09-28 |
| CVE-2026-76427 | medium | 4.9 | No | A vulnerability in the offline profiler feed service of Cisco ISE could allow an authenticated, remote attacker to read arbitrary files that... | 2026-09-28 |
| CVE-2026-76426 | medium | 4.9 | No | A vulnerability in the REST API of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to conduct SQL injection attack... | 2026-09-28 |
| CVE-2026-76425 | high | 7.6 | No | A vulnerability in the APIs of Cisco ISE could allow an authenticated, remote attacker to conduct SQL injection attacks against the backend... | 2026-09-28 |
| CVE-2026-76424 | high | 7.2 | No | A vulnerability in the REST API of Cisco ISE could allow an authenticated, remote attacker to upload or copy arbitrary files on an affected... | 2026-09-28 |
| CVE-2026-88772 | high | 8.1 | Listed | Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14... | 2026-09-28 |
| CVE-2026-87902 | high | 8.1 | Listed | An unauthenticated attacker can make `get_page_template()` page-template resolution include a chosen readable local `.php` file outside the... | 2026-09-28 |