S0:E46: Cisco's ISE had a CVSS 10 And It Was Already Being Exploited
Cisco released 16 critical security advisories in just three days in September, including a CVSS 10 in Cisco ISE (CVE-2026-76460): an authentication bypass at an API endpoint that lets attackers get past the web-based management interface, and it was already being exploited in the wild per Cisco's own advisory.
Jess and Jake are joined again by guest Richy Noel to break it down: what Cisco ISE's network admission control actually does, why an authentication bypass there is so dangerous, and Richy's real answer to "do you threat hunt on every CVSS 10?" — it depends on whether the asset is…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.