EP. 163: Cisco ISE Zero-Day CVE-2026-76460 Exploited in Active Attacks

The Digital Warfare Podcast · Sep 17, 2026 · 5m · transcript

Summary

Cisco has disclosed CVE-2026-76460, a maximum severity authentication bypass affecting Cisco Identity Services Engine and ISE Passive Identity Connector. Cisco says the flaw results from insufficient authentication controls on an API endpoint and can allow an unauthenticated remote attacker to send a crafted request and gain unauthorized access by bypassing the web based management interface.

The vulnerability carries a CVSS 3.1 score of 10.0. Cisco confirms active exploitation, says there are no workarounds, and strongly recommends upgrading to a fixed software release.

Fixed…