Cisco warns of max severity ISE zero-day exploited in attacks

By Sergiu Gatlan

AI Summary

Cisco issued an emergency patch for CVE-2026-76460, a maximum-severity (CVSS 10.0) authentication bypass zero-day in its Identity Services Engine (ISE) that remote, unauthenticated attackers are actively exploiting via crafted API requests. ISE is widely deployed as a network access control solution, making active exploitation of a max-severity auth bypass a critical priority for enterprise security teams to patch immediately.

Read full article → https://www.bleepingcomputer.com/news/security/cis…

Relevance score: 88.0/100

# More from September 19

2
Brevo Supply Chain Attack Injects Malware Into 100,000 Websites SecurityWeek
3
Microsoft Patches CVSS 10.0 Azure AI Foundry Flaw Enabling Unauthorized Privilege Escalation The Hacker News
4
Critical Unbound DNSSEC Validator Flaw Could Allow RCE via a Malicious DNS Zone The Hacker News
5
Plugin4Shell Lets Repository Owners Swap Pinned Plugin Code Across Four AI Coding Agents The Hacker News
6
An Abandoned CDN Domain Was Re-Registered. Thousands of Sites Still Call It. The Hacker News
7
Public Exploits Released for Four Linux Kernel Flaws That Enable Local Root The Hacker News
8
International security agencies warn about North Korean hackers exploiting job seekers to steal crypto, data CyberScoop
9
Transparent Tribe Deploys New Rust Backdoor Using Private GitHub Repositories for C2 The Hacker News
10
New Check Point flaw lets hackers execute code with root privileges BleepingComputer