CVE-2026-76426 is a medium-severity vulnerability in the REST API of Cisco ISE and Cisco ISE-PIC that allows an authenticated remote attacker with administrative privileges to perform SQL injection attacks against the monitoring database. The flaw arises from insufficient validation of certain parameters that are concatenated into SQL statements. Exploitation requires valid admin credentials and could lead to unauthorized reading of monitoring database information.