CVE-2026-76460

A vulnerability in an API of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to bypass authentication. This vulnerability is due to insufficient authentication control on an API endpoint. An attacker could exploit this vulnerability by sending a crafted request to an affected API endpoint. A successful exploit could allow the attacker to gain unauthorized access to the affected device by bypassing the web-based management interface.

CVSS 3.1

10.0CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

EPSS

76% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-10-25)

CISA KEV

listed 2026-09-16, due 2026-09-19

CWE

CWE-648

Published

2026-09-16

Modified

2026-10-07

Record from

the NVD, synced 2026-10-19

Affected

• cisco:identity_services_engine
• cisco:identity_services_engine_passive_identity_connector

References

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ISE-ABP-VNSW7Tn5
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-76460

Check your stackJSON