
Two CVSS 10.0 Vulnerabilities Demand Immediate Action
Two CVSS 10.0 Vulnerabilities Demand Immediate Action
Two maximum-severity vulnerabilities have emerged within hours of each other, both scoring CVSS 10.0. CVE-2026-76460, an authentication bypass flaw in Cisco Identity Services Engine, is confirmed by CISA as actively exploited in the wild. The vulnerability allows attackers to bypass network access controls entirely, with no credentials required. A second Cisco flaw, CVE-2026-76461 affecting Secure Email Gateway, has also entered CISA’s known exploited vulnerabilities catalogue. Simultaneously, Microsoft disclosed seven CVSS 10.0…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.