VulnerabilitiesSep 18, 2026
Cisco Zero-Day Highlights API Endpoint Authentication Issues
Cisco ISE zero-day CVE-2026-76460 allows authentication bypass via API endpoints.
Summary
A critical zero-day vulnerability, CVE-2026-76460, has been discovered in Cisco's Identity Services Engine (ISE). This flaw allows for an authentication bypass through API endpoints, earning it a maximum CVSS score of 10. The vulnerability highlights ongoing challenges with securing API authentication mechanisms.
Indicators of Compromise
- cve — CVE-2026-76460
Entities
Identity Services Engine (ISE) (product)Cisco (vendor)API (technology)