As of the publication date, Cisco has not released a patch. Organizations should: 1) Monitor Cisco's security advisories for updates and patch availability. 2) Apply any recommended mitigations or workarounds provided by Cisco. 3) Restrict network access to ISE management interfaces to trusted hosts. 4) Review ISE logs for suspicious authentication attempts or unauthorized access. 5) Enable multi-factor authentication where possible to reduce risk.
Quick answers
What is CVE-2026-76460?
As of the publication date, Cisco has not released a patch. Organizations should: 1) Monitor Cisco's security advisories for updates and patch availability. 2) Apply any recommended mitigations or workarounds provided by Cisco. 3) Restrict network access to ISE management interfaces to trusted hosts. 4) Review ISE logs for suspicious authentication attempts or unauthorized access. 5) Enable multi-factor authentication where possible to reduce risk.
How severe is CVE-2026-76460?
critical, CVSS 10
Is CVE-2026-76460 known to be exploited?
It is not marked known-exploited in this record.
How should CVE-2026-76460 be mitigated?
As of the publication date, Cisco has not released a patch. Organizations should: 1) Monitor Cisco's security advisories for updates and patch availability. 2) Apply any recommended mitigations or workarounds provided by Cisco. 3) Restrict network access to ISE management interfaces to trusted hosts. 4) Review ISE logs for suspicious authentication attempts or unauthorized access. 5) Enable multi-factor authentication where possible to reduce risk.
CVSS
10
Vendor
Cisco
Published
Sep 30, 2026 · 08:43
Patch
Unknown / not confirmed
Affected products
Identity Services Engine
Mitigation
As of the publication date, Cisco has not released a patch. Organizations should: 1) Monitor Cisco's security advisories for updates and patch availability. 2) Apply any recommended mitigations or workarounds provided by Cisco. 3) Restrict network access to ISE management interfaces to trusted hosts. 4) Review ISE logs for suspicious authentication attempts or unauthorized access. 5) Enable multi-factor authentication where possible to reduce risk.
Cisco disclosed a zero-day authentication bypass vulnerability in its Identity Services Engine (ISE) API endpoints, tracked as CVE-2026-76460. The flaw carries a maximum CVSS score of 10.0, allowing unauthenticated attackers to bypass authentication controls and potentially access sensitive network policy data. Cisco has released security updates, and administrators are urged to apply patches immediately.
Cisco has disclosed a critical zero-day vulnerability in Identity Services Engine (ISE), tracked as CVE-2026-76460 with a CVSS score of 10.0. The flaw, due to insufficient authentication controls on an API endpoint, allows unauthenticated remote attackers to bypass authentication. Cisco has confirmed active exploitation in the wild. No patch is available yet; organizations are urged to apply mitigations and monitor advisories.
