Hackers Exploit Critical Cisco ISE Flaw to Bypass Authentication and Gain Root Access
Cisco patched CVE-2026-76460, a CVSS 10.0 authentication bypass in ISE and ISE-PIC that can grant unauthenticated attackers root access.
78
Product
Cisco ISE-PIC
- Mentions · 7d0
- Mentions · 30d0
- All mentions2
- First seenSep 17, 2026
- Last mentionedSep 17, 2026
Timeline
2 articles · newest firstCisco warns of max severity ISE zero-day exploited in attacks
Cisco patched CVE-2026-76460, a maximum-severity authentication bypass in Identity Services Engine actively exploited in attacks; CISA added it to KEV with a three-day federal deadline.
84
Related CVEs
by mentions- CVE-2026-7646076%10.0Unauthenticated Management Interface Bypass in Cisco ISE and ISE-PIC
- CVE-2025-2033774%10.0Unauthenticated Injection Flaw Allows Root RCE in Cisco ISE and ISE-PIC
- CVE-2026-7642310.0Unauthenticated Administrative Access via REST API Flaw in Cisco ISE and ISE-PIC
- Authenticated Java Deserialization RCE in Cisco ISE Web Management Interface
- Authenticated SQL Injection in Cisco ISE SXP REST API
- Authenticated Java Deserialization RCE in Cisco Identity Services Engine (ISE)
- Authenticated Command Injection in Cisco Identity Services Engine (ISE)
Appears with
- Cisco ISEproduct · 2
- Ciscovendor · 2
- CISAorganization · 1
- Ciscoorganization · 1
- Cisco PSIRTorganization · 1
- IdentityAuditAction web shellmalware · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.