<![CDATA[🔴 Critical: Cisco Warns of New Zero-Day ISE Auth Bypass (CVSS 10.0) Exploited in Active Attacks]]>

<![CDATA[🔴 Critical: Cisco Warns of New Zero-Day ISE Auth Bypass (CVSS 10.0) Exploited in Active Attacks]]>Cisco has issued a warning about a maximum-severity vulnerability in Identity Services Engine (ISE) that is being actively exploited in the wild. Tracked as CVE-2026-76460 with a CVSS score of 10.0, the flaw allows an unauthenticated, remote attacker to bypass authentication.

According to Cisco, the issue stems from insufficient authentication control on an API endpoint. This means an attacker could potentially gain access without valid credentials, making it a critical risk for organizations relying on ISE for network access control.

Affected product: Cisco Identity Services Engine (ISE)
Vulnerability type: Authentication bypass
Severity: CVSS 10.0 (maximum)
Exploitation status: Active attacks observed
Attack vector: Remote, unauthenticated

Cisco has not yet provided specific patch details or workarounds in the available information, but given the active exploitation and maximum severity, administrators should treat this as an urgent priority. Monitor official Cisco advisories for updates and mitigation guidance.

Source: The Hacker News

Is your organization running Cisco ISE, and if so, what steps are you taking to mitigate this zero-day?

]]>https://xploitlk.com/topic/405/critical-cisco-warns-of-new-zero-day-ise-auth-bypass-cvss-10.0-exploited-in-active-attacksRSS for NodeTue, 27 Oct 2026 11:22:12 GMTSun, 20 Sep 2026 18:30:20 GMT60