> TritonInfoSec News
Home / Sep 20, 2026 / Story
0
#5 Dark Reading general September 18, 2026 at 19:26 UTC

Cisco Zero-Day Highlights API Endpoint Authentication Issues

By Rob Wright

AI Summary

Cisco disclosed CVE-2026-76460, a CVSS 10.0 authentication bypass zero-day in its Identity Services Engine (ISE), stemming from improper API endpoint authentication. ISE is widely deployed as a network access control solution, making a maximum-severity unauthenticated flaw particularly dangerous for enterprise network perimeters.

Read full article → https://www.darkreading.com/vulnerabilities-threat…

Relevance score: 84.0/100

# More from September 20

  1. 1
    ShinyHunters hacks Clop leak site, threatens to extort ransomware gang BleepingComputer
  2. 2
    North Korean WaterPlum hackers infected 30,000 devices worldwide BleepingComputer
  3. 3
    Critical Pre-Auth RCE in Orkes Conductor Workflow Platform Exploited in the Wild The Hacker News
  4. 4
    Claude Opus 5 Helped Researchers Take Over OpenAI Staff Accounts via Chained Flaws The Hacker News
  5. 6
    CISA Flags Three Linux Kernel Vulnerabilities Exploited in the Wild The Hacker News
  6. 7
    SolarWinds Patches ARM Hard-Coded Key Flaw Enabling Unauthenticated RCE The Hacker News
  7. 8
    CrowdSec Says TanStack npm Attack Led to Copy of 170 Private GitHub Repositories The Hacker News
  8. 9
    Gyazo server flaw exploited to steal 23.6 million user records BleepingComputer
  9. 10
    Early Scattered Spider member pleads guilty to cybercrime spree CyberScoop