Cisco security advisory (AV26-932)
Cisco September 2026 updates fix flaws in ASA, FTD, FMC, ISE, and Nexus Dashboard; CISA added actively exploited CVE-2026-76460 to KEV.
Cisco's September 2026 hardening releases address vulnerabilities across Secure Firewall Threat Defense and Management Center, ASA, Identity Services Engine, ISE-PIC, and Nexus Dashboard, with fixes in branches such as FTD/FMC 7.0.10-10.1.0, ASA 9.16.4.103-9.24.1.26, and ISE 3.1 Patch 12-3.5 Patch 4. CISA added CVE-2026-76460, a Cisco Identity Services Engine authentication bypass, to its Known Exploited Vulnerabilities catalog on September 16, 2026. The Canadian Centre for Cyber Security urges users and administrators to review the advisories and apply the updates.
- CISA added CVE-2026-76460 (ISE authentication bypass) to KEV on September 16, 2026
- Affected products include Cisco FTD, FMC, ASA, ISE, ISE-PIC, and Nexus Dashboard
- Canadian Cyber Centre urges administrators to apply updated releases
- CVEs
- CVE-2026-76460
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-76460 | Unauthenticated Management Interface Bypass in Cisco ISE and ISE-PIC | 10.0 | 76% | KEVPoC | KEV |
From the original article
1 min read at cyber.gc.ca
Serial number: AV26-932 Date: September 17, 2026 As of September 16, 2026, Cisco is affected by vulnerabilities in the following products: Cisco Secure Firewall Threat Defense (FTD) Software Prior to 7. 0. 10, 7.
cyber.gc.ca
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.