CISCO Security Advisory
Published Date: Not specified
CVE: CVE-2026-76460
Advisory Summary
🛑 ⟪ Cisco Identity Services Engine Authentication Bypass (CVE-2026-76460) ⟫ — Critical Risk for Network Access Control
- Cisco disclosed a Critical vulnerability in an API of Cisco Identity Services Engine (ISE).
- The issue is caused by insufficient authentication control on an affected API endpoint.
- A remote attacker could send a crafted request and bypass authentication, potentially gaining unauthorized access to the device (by avoiding the normal web-based management authentication path).
- Impact category: Authentication bypass → elevated likelihood of full device compromise depending on post-auth capabilities.
- Exposure path: Unauthenticated remote exploitation suggests this is especially dangerous if the ISE API endpoint is reachable from untrusted networks.
- Business risk: ISE is central to network access policy enforcement; compromise can lead to policy bypass, impersonation, and lateral movement enablement.
- No workaround is provided.
- Cisco has released software updates to address the vulnerability.
- Given the bypass nature and Critical rating, assuming wormable-style opportunistic scanning is prudent.
- Look for anomalous API requests to ISE endpoints
- Validate authentication and configuration-change logs around the timeframe of any suspicious activity
🔗
-2026-76460
Reference: Vendor Advisory