CVE-2026-76460: cisco identity_services_engine, cisco identity_services_engine_passive_identity_connector

CVSS 10.0 (critical) · listed as exploited by CISA since 2026-09-16 · published 2026-09-16

A vulnerability in an API of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to bypass authentication. This vulnerability is due to insufficient authentication control on an API endpoint. An attacker could exploit this vulnerability by sending a crafted request to an affected API endpoint. A successful exploit could allow the attacker to gain unauthorized access to the affected device by bypassing the web-based management interface.

Affected products (NVD): cisco identity_services_engine, cisco identity_services_engine_passive_identity_connector

Weakness: CWE-648

Source: NVD CVE-2026-76460

References

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ISE-ABP-VNSW7Tn5
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-76460

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.