THREAT OPS › CVEs › CVE-2026-76460
CVE-2026-76460 — Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability
Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) contain an incorrect use of privileged APIs vulnerability that could allow an unauthenticated, remote attacker to gain unauthorized access to the affected device by bypassing the web-based management interface.
Vulnerability details
- Affected productsIdentity Services Engine
- KEV remediation due2026-09-19
Related reporting
- CVE-2026-76460: Cisco ISE Flaw Actively Exploitedsocradar_blog
- AL26-021 - Vulnerabilities Impacting Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) - CVE-2026-20192, CVE-2026-76423 and CVE-2026-76460cccs_ca
- Cisco security advisory (AV26-932)cccs_ca
- Cisco Warns of New Zero-Day ISE Auth Bypass (CVSS 10.0) Exploited in Active Attacksthehackernews
- CISA Adds Two Known Exploited Vulnerabilities to Catalogcisa_advisories
- [CISA KEV] CVE-2026-76460 — Cisco Identity Services Engine: Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerabilitycisa_kev
- Cisco Identity Services Engine Authentication Bypass Vulnerabilitycisco_psirt