CVE-2026-76446 is a medium severity vulnerability in an API of Cisco ISE and Cisco ISE-PIC that allows an authenticated remote attacker to read specific files on the underlying operating system. The issue arises from improper restriction of XML external entity (XXE) references. Exploitation requires sending a crafted request to the affected device. The vulnerability impacts confidentiality but does not affect integrity or availability. No patch or remediation information is currently available.