Unauthenticated Remote Attack Vulnerability in Cisco ISE OCSP Responder

CVE-2026-76447

What is CVE-2026-76447?

A vulnerability exists in the Online Certificate Status Protocol (OCSP) responder of Cisco's Identity Services Engine (ISE) and the ISE-PIC, allowing unauthenticated, remote attackers to trigger an administrative reload of the OCSP responder's certificate and key material. This flaw stems from inadequate authentication mechanisms within the OCSP responder function. By sending a specially crafted request to the device, an attacker could exploit this vulnerability, potentially affecting the security of the system by reloading critical certificate and key information.

References