CISCO Security Advisory
Published Date: Not specified
CVE: CVE-2026-76460
Advisory Summary
🛑 🚨 Security Alert: Cisco PSIRT Advance Notice (Sep 16, 2026)
Cisco PSIRT has published multiple security advisories requiring remediation via the fixed software indicated in the respective bulletins. The update set is heavily focused on Cisco Identity Services Engine (ISE), including multiple Critical issues with maximum impact potential.
- Authentication Bypass — CVE-2026-76460 (Critical, 10.0)
- Remote Code Execution (RCE) — CVE-2026-20211, CVE-2026-20176, CVE-2026-20307 (Critical, 9.9)
- Authenticated RCE & API-related vulnerabilities — CVE-2026-20282, CVE-2026-20283, CVE-2026-20284 (Critical, 9.1)
- Command Injection — CVE-2026-20306, CVE-2026-20305 (Critical, 9.1)
- Multiple ISE vulnerabilities clustered under an ISE bundle — CVE-2026-76423, CVE-2026-76425, CVE-2026-76426, CVE-2026-76427, CVE-2026-76428, CVE-2026-76424 (Critical, 10.0)
- ISE Hardening Release: September 2026 — CVE-2026-20130, CVE-2026-20192, CVE-2026-20194, CVE-2026-20234, CVE-2026-20237, CVE-2026-20287 (Critical, 10.0)
- RADIUS Denial of Service — CVE-2026-20352 (High, 8.6)
- SQL Injection — CVE-2026-20247, CVE-2026-20300 (High, 7.5)
- Identify all deployments of Cisco ISE (including clusters, HA, admin/portal surfaces, and any integrations that touch authentication/RADIUS flows).
- Cisco’s guidance is to upgrade to the fixed software versions referenced by each advisory—treat the Critical RCE/auth-bypass/command-injection entries as emergency remediation.
- Tighten admin access paths (management plane reachability), reduce unnecessary API exposure, and review any compensating controls around authentication flows and RADIUS handling until upgrades are complete.
- “Hardening Release: September 2026” indicates security posture changes; ensure change management includes compatibility validation and rollback planning.
Reference: Vendor Advisory