Cisco Zero-Day Highlights API Endpoint Authentication Issues
Cisco ISE zero-day CVE-2026-76460 is a maximum-severity (CVSS 10.0) authentication bypass affecting API endpoint authentication.
CVE-2026-76460 is an authentication bypass flaw affecting Cisco Identity Services Engine (ISE), scored at the maximum 10.0 on the CVSS scale. Dark Reading characterizes the issue as a zero-day and frames it as highlighting broader authentication weaknesses in API endpoints. The brief report provides no exploitation details, victim counts, or patch status.
- CVE-2026-76460 affects Cisco Identity Services Engine (ISE)
- Rated maximum severity with CVSS score of 10.0
- Authentication bypass targeting API endpoint authentication
- Reported as a zero-day
- CVEs
- CVE-2026-76460
- Vendors
- Cisco
- Products
- Cisco Identity Services Engine
- Organizations
- Dark Reading
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-76460 | Unauthenticated Management Interface Bypass in Cisco ISE and ISE-PIC | 10.0 | 76% | KEVPoC | KEV |
From the original article
The authentication bypass flaw CVE-2026-76460 impacts Cisco's Identity Services Engine (ISE) and received a maximum 10 out of 10 CVSS score.
By Rob Wright · darkreading.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.