Cisco ISE Zero-Day with CVSS Score of 10 Actively Exploited

Cisco has confirmed the active exploitation of CVE-2026-76460, a critical authentication bypass vulnerability in Identity Services Engine, a platform used to control identities, devices, and access to corporate networks. The flaw stems from insufficient checks on an API endpoint and allows an unauthenticated remote attacker to access the management interface through specially crafted requests. The vulnerability has a CVSS score of 10.0 and has been added by CISA to its Known Exploited Vulnerabilities catalog alongside flaws in Acronis Backup and Google Pixel. Cisco has released patched versions, urging customers to upgrade immediately and check for any indicators of compromise. The urgency is particularly high because ISE occupies a privileged position within the security architecture: compromising it could allow attackers to alter access policies, gain visibility into users, and facilitate further movement within the network.

Source: The Hacker News