CVE-2026-76460 Cisco Cisco Identity Services Engine Software
A vulnerability in an API of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to bypass authentication. This vulnerability is due to insufficient authentication control on an API endpoint. An attacker could exploit this…
- CVSS
- 10.0 Critical
- EPSS
- 76%
- Percentile
- 100
- Published
- 2026-09-16
- Force
- 11 of 12
- Public PoC
- 1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
On CISA’s exploited list
Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability
- Added
- 2026-09-16
- Federal patch deadline
- 2026-09-19
- Ransomware use
- not known