Cisco Warns of Max Severity ISE Zero-Day Exploited in Attacks

Cisco warns of max severity ISE zero-day exploited in attacks

Cisco has released security updates to address a maximum-severity Identity Services Engine vulnerability that attackers are actively exploiting in the wild.

Active Exploitation Triggers Emergency Patch for Cisco ISE Zero-Day

Cisco has patched an exploited Identity Services Engine zero-day authentication bypass vulnerability tracked as CVE-2026-76460.

The Gatekeeper Is the Door: Cisco ISE’s Nine-CVE Disclosure and the Identity Infrastructure Attack Surface

Cisco disclosed nine vulnerabilities in its Identity Services Engine (ISE) on September 16, 2026, including multiple critical-severity flaws currently under active exploitation. The Cisco PSIRT advisory confirms that CVE-2026-76460, an unauthenticated REST API authentication bypass, carries a CVSS score of 10.0 and is being leveraged by attackers in the wild. The discovery of CVE-2026-76460 occurred […]