Skip to content
NewA calmer, faster ZeroHour
Advisoryhigh

Cisco Identity Services Engine Authentication Bypass Vulnerability

Cisco Security Advisories ()1
Read at sec.cloudapps.cisco.com
Part of a story covered by 14 sourcesCisco ISE September 2026 hardening release fixes actively exploited authentication bypass CVE-2026-76460 plus RCE, SQL injection, XXE and path traversal flawsMerged summary & timeline
AI summary · glm-5.3-flashSummaries by Vani AI

Cisco patched an unauthenticated API authentication bypass in Identity Services Engine allowing attackers to access the web-based management interface.

A vulnerability in an API of Cisco Identity Services Engine (ISE) stems from insufficient authentication control on an API endpoint. An unauthenticated remote attacker can send a crafted request to bypass authentication and gain unauthorized access to the device via the web-based management interface. Cisco has released software updates and no workarounds are available.

Key facts
  • Unauthenticated remote authentication bypass via crafted API request
  • Grants access to the ISE web-based management interface
  • No workarounds; software updates are the only fix
  • ISE is widely deployed for network access control and identity policy
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat
Tags
apiauthentication-bypassciscoidentity-services-engineisepatch
Vendors
Cisco
Products
Cisco Identity Services Engine (ISE)
Organizations
Cisco

From the original article

A vulnerability in an API of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to bypass authentication. This vulnerability is due to insufficient authentication control on an API endpoint. An attacker could exploit this vulnerability by sending a crafted request to an affected API endpoint.

Cisco Security Advisories

sec.cloudapps.cisco.com

Read the full article at Cisco Security Advisories

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.