What is CVE-2026-76460?
A vulnerability in an API of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to bypass authentication. This vulnerability is due to insufficient authentication control on an API endpoint. An attacker could exploit this vulnerability by sending a crafted request to an affected API endpoint. A successful exploit could allow the attacker to gain unauthorized access to the affected device by bypassing the web-based management interface.
Timeline
- 2026-09-16Published to the U.S. National Vulnerability Database (NVD)
- 2026-09-16Added to the CISA Known Exploited Vulnerabilities (KEV) catalog
- 2026-09-17NVD record last updated
- 2026-09-19CISA federal remediation deadline (BOD 22-01)
CISA Known Exploited Vulnerability
Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability
Affected product
Cisco Identity Services Engine
Remediation Steps
- Consult CISA's Known Exploited Vulnerabilities Catalog for detailed product and vendor information
- Identify affected products in your infrastructure
- Apply vendor-provided security patch
- Verify remediation and document completion
References
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ISE-ABP-VNSW7Tn5
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-76460
- https://cisa.gov/known-exploited-vulnerabilities-catalog
- https://nvd.nist.gov/vuln/detail/CVE-2026-76460
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog
Referenced in our briefings & reports
- Vulnerability Priority Report – Week 2 of September 2026 (September 14 – 20)
Browse all tracked CVEs in the defend.network CVE database →
🤖 This CVE page is generated by defend.network from NVD, CISA KEV, EPSS, and our verified daily briefings. Severity and exploitation data come from official sources; always verify remediation steps against the official vendor advisory before acting in production.