> TritonInfoSec News
Home / Sep 18, 2026 / Story
0
#1 The Hacker News general September 17, 2026 at 06:39 UTC

Cisco Warns of New Zero-Day ISE Auth Bypass (CVSS 10.0) Exploited in Active Attacks

By [email protected] (The Hacker News)

AI Summary

Cisco disclosed CVE-2026-76460, a CVSS 10.0 authentication bypass zero-day in Identity Services Engine (ISE) that allows unauthenticated remote attackers to bypass authentication via crafted API requests. This is the second actively exploited ISE zero-day disclosed in as many days, and ISE has now seen three actively exploited vulnerabilities since June 2025 — making it a critical priority for patching in enterprise environments.

Read full article → https://thehackernews.com/2026/09/cisco-warns-of-n…

Relevance score: 92.0/100

# More from September 18

  1. 2
    Cisco alerts customers to second actively exploited zero-day in as many days CyberScoop
  2. 3
    Brevo supply-chain attack injected ClickFix scripts on customer sites BleepingComputer
  3. 4
    Cyberattacks on Two Oil Tankers Prompt Coast Guard, FBI to Board Vessels SecurityWeek
  4. 5
    Critical Check Point Management Flaw Lets Unauthenticated Attackers Run Code as Root The Hacker News
  5. 6
    China-Aligned FamousSparrow Deploys SparroWocky Backdoor Across Latin America The Hacker News
  6. 7
    Gyazo Breach Exposes 23.62 Million User Records and 490 Million Image Metadata Records The Hacker News
  7. 8
    Revolut Data Breach: 5 Months, 680 High-Profile Accounts, $3M Ransom SecurityWeek
  8. 9
    BIND 9 Update Fixes 14 Flaws, Including an Unauthenticated Crash Over DNS-over-HTTPS The Hacker News
  9. 10
    Iran-Linked Handala Hack Tied to HEAVYGRAM Telegram Backdoor That Can Steal Passwords The Hacker News