CVE-2026-76428 is a medium severity SQL injection vulnerability in the REST APIs of Cisco ISE and Cisco ISE-PIC. It allows an authenticated attacker with administrative credentials to inject SQL statements into the session database due to improper parameter handling. Exploitation could lead to unauthorized reading of session database information. No public exploits are known, and no patch information is provided.