Unauthenticated Endpoint Posture Manipulation in Cisco ISE Guest Portal

CVE-2026-76439

What is CVE-2026-76439?

A vulnerability exists within the endpoint posture status reporting of the guest portal web application in Cisco Identity Services Engine (ISE). This flaw arises from inadequate authentication mechanisms on an internal interface accessible through the guest portal. It enables an unauthenticated, remote attacker to forge posture status events, effectively allowing manipulation of the endpoint posture assessment. Attackers can exploit this by sending crafted requests to the vulnerable application, which could compromise the integrity of the posture information and potentially lead to unauthorized access or control over the device.

References