Cisco has warned that a maximum-severity vulnerability in Identity Services Engine (ISE) is being actively exploited. Tracked as CVE-2026-76460 and rated 10.0 on the CVSS scale, the flaw stems from insufficient authentication controls on an API endpoint. An unauthenticated remote attacker can send a specially crafted request to bypass authentication and obtain unauthorized access through the affected device’s web-based management interface.
The incident matters because ISE is used to control and administer network access, while exploitation does not require prior authentication. Organizations running affected ISE deployments should treat the warning as an urgent security issue and consult Cisco’s official security guidance for the applicable remediation.
https://thehackernews.com/2026/09/weekly-recap-cisco-0-day-ai-agent-rce.html
oxhak / Ox HaK
npub1sx…dz7z7
2026-09-21 15:05:53 UTC
Author Public Key
npub1sxexewvzysc3affq4yzzh7w8e3udyujap2vlj7t6lkdg5dvhp24q4dz7z7Seen on
wss://relay.damus.ioPublished at
2026-09-21 15:05:53 UTCEvent JSON
{
"id": "0c8899ae116b937d0e8397f928c16ac184e85b11d2a236e2159d90f387973ae1",
"pubkey": "81b26cb98224311ea520a9042bf9c7cc78d2725d0a99f9797afd9a8a35970aaa",
"created_at": 1790003153,
"kind": 1,
"tags": [],
"content": "Cisco has warned that a maximum-severity vulnerability in Identity Services Engine (ISE) is being actively exploited. Tracked as CVE-2026-76460 and rated 10.0 on the CVSS scale, the flaw stems from insufficient authentication controls on an API endpoint. An unauthenticated remote attacker can send a specially crafted request to bypass authentication and obtain unauthorized access through the affected device’s web-based management interface.\n\nThe incident matters because ISE is used to control and administer network access, while exploitation does not require prior authentication. Organizations running affected ISE deployments should treat the warning as an urgent security issue and consult Cisco’s official security guidance for the applicable remediation.\n\nhttps://thehackernews.com/2026/09/weekly-recap-cisco-0-day-ai-agent-rce.html",
"sig": "9f9c584ecc378c57841bd945db93c60194006a8d8f74eb6ac9cefdbac6c39649e02ee0db8a2cbb95c1e863768c4b4577acbe34ea1198eb30ea336a7eb773c695"
}