Cisco issues ISE fixes as the report conflicts on exploitation status
SecurityUnverifiedUpdated:
A report describes fixes and an exploitation warning for Cisco ISE and ISE-PIC authentication-bypass flaw CVE-2026-76460. The saved report also contains conflicting statements about whether that same identifier was actively exploited.
An authentication weakness in an access-management API
According to the report, insufficient authentication control on an ISE and ISE-PIC API endpoint could let an attacker send a crafted request, bypass the web-based management interface and gain unauthorized device access. ISE centrally manages access by endpoints, users and devices to network resources.
The report says no workaround exists for the flaw and presents upgrading to a fixed software release as the recommended response.
Fixes accompanied by a reported exploitation warning
The first part of the article says Cisco’s PSIRT was aware of exploitation of CVE-2026-76460 and strongly recommended upgrading. It also reports that CISA added the identifier to its KEV Catalog and required federal agencies to patch within three days.
Later, however, the same article includes CVE-2026-76460 in a separate group said not yet to have been flagged as actively exploited. The saved source alone does not resolve this contradiction. Reported claims about fixes and warnings should therefore be distinguished from independently confirmed exploitation status.
Sources
- BleepingComputerCisco warns of max severity ISE zero-day exploited in attacksRead source →