IdentityAuditAction web shell

Mentions · 7d0
Mentions · 30d0
All mentions1
First seenSep 17, 2026
Last mentionedSep 17, 2026

Timeline

1 articles · newest first

Cisco warns of max severity ISE zero-day exploited in attacks

Cisco patched CVE-2026-76460, a maximum-severity authentication bypass in Identity Services Engine actively exploited in attacks; CISA added it to KEV with a three-day federal deadline.

BleepingComputerSep 17, 07:20 UTC · Sep 17, 2026Exploit / PoCExploitedCVE-2026-76460 CVE-2026-76423 CVE-2026-20176+42 · 1 read

Related CVEs

by mentions

CVE-2025-2033774%10.0
Unauthenticated Injection Flaw Allows Root RCE in Cisco ISE and ISE-PIC
published Jul 16, 2025Cisco Identity Services Engine (ISE)KEV
CVE-2026-7646076%10.0
Unauthenticated Management Interface Bypass in Cisco ISE and ISE-PIC
published Sep 16, 2026Cisco Identity Services Engine (ISE)KEVPoC
CVE-2026-7642310.0
Unauthenticated Administrative Access via REST API Flaw in Cisco ISE and ISE-PIC
published Sep 16, 2026Cisco Identity Services Engine (ISE)
CVE-2026-203079.9
Authenticated Java Deserialization RCE in Cisco ISE Web Management Interface
published Sep 16, 2026Cisco Identity Services Engine (ISE) - web-based management interface
CVE-2026-201769.1
Authenticated Command Injection in Cisco Identity Services Engine (ISE)
published Sep 16, 2026Cisco Identity Services Engine (ISE)
CVE-2026-202119.1
Authenticated Java Deserialization RCE in Cisco Identity Services Engine (ISE)
published Sep 16, 2026Cisco Identity Services Engine (ISE)
CVE-2026-202849.1
Authenticated SQL Injection in Cisco ISE SXP REST API
published Sep 16, 2026Cisco Identity Services Engine (ISE) — SXP REST API

Appears with

CISAorganization · 1
Ciscoorganization · 1
Cisco ISEproduct · 1
Cisco ISE-PICproduct · 1
Cisco PSIRTorganization · 1
Ciscovendor · 1

Entities are extracted by the model from each article. First seen Sep 17, 2026, last mentioned Sep 17, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.