🔴 Critical: Cisco Warns of New Zero-Day ISE Auth Bypass (CVSS 10.0) Exploited in Active Attacks
-
Cisco has issued a warning about a maximum-severity vulnerability in Identity Services Engine (ISE) that is being actively exploited in the wild. Tracked as CVE-2026-76460 with a CVSS score of 10.0, the flaw allows an unauthenticated, remote attacker to bypass authentication.
According to Cisco, the issue stems from insufficient authentication control on an API endpoint. This means an attacker could potentially gain access without valid credentials, making it a critical risk for organizations relying on ISE for network access control.
- Affected product: Cisco Identity Services Engine (ISE)
- Vulnerability type: Authentication bypass
- Severity: CVSS 10.0 (maximum)
- Exploitation status: Active attacks observed
- Attack vector: Remote, unauthenticated
Cisco has not yet provided specific patch details or workarounds in the available information, but given the active exploitation and maximum severity, administrators should treat this as an urgent priority. Monitor official Cisco advisories for updates and mitigation guidance.
Source: The Hacker News
Is your organization running Cisco ISE, and if so, what steps are you taking to mitigate this zero-day?
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login