CVE-2026-76460Vulnerability

1. “CVE-2026-76460”

   Recorded FutureVendor13 Oct 2026
   September 2026 CVE Landscape

2. “CVE-2026-76460 An API authentication bypass vulnerability in the Cisco Identity Service Engine that allows an unauthenticated threat actor to bypass administrator authentication.”

   AhnLab ASECVendor6 Oct 2026
   Q3 2026 Vulnerability Trend Report

3. “Just last month, Cisco warned customers of about active exploitation of CVE-2026-76460, a maximum severity flaw with a CVSS rating of 10 which affected its Cisco Identity Services Engine (ISE).”

   Infosecurity MagazineNews1 Oct 2026
   Critical Cisco Catalyst SD-WAN Zero-Day Under Active Exploitation

4. “Cisco has addressed CVE-2026-76460 & CVE-2026-76461, two critical vulnerabilities affecting Cisco ISE and Secure Email Gateway with CVSS scores of 10.0 and 9.8.”

   Check Point ResearchVendor21 Sep 2026
   21st September – Threat Intelligence Report

5. “[Cisco CVE-2026-76460 // Cisco CVE-2026-76461]”

   Risky Business NewsNews21 Sep 2026
   Risky Bulletin: Gemini hacked three companies too

6. “CVE-2026-76460”

   CERT-FRGovernment21 Sep 2026
   Bulletin d'actualité CERTFR-2026-ACT-040 (21 septembre 2026)

7. “The authentication bypass flaw CVE-2026-76460 impacts Cisco's Identity Services Engine (ISE) and received a maximum 10 out of 10 CVSS score.”

   Dark ReadingNews18 Sep 2026
   Cisco Zero-Day Highlights API Endpoint Authentication Issues

8. “…pacting Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) - CVE-2026-20192, CVE-2026-76423 and CVE-2026-76460”

   Canadian Centre for Cyber SecurityGovernment17 Sep 2026
   AL26-021 - Vulnerabilities Impacting Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) - CVE-2026-20192, CVE-2026-76423 and CVE-2026-76460

9. “On September 16, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-76460 to their Known Exploited Vulnerabilities (KEV) Database.”

   Canadian Centre for Cyber SecurityGovernment17 Sep 2026
   Cisco security advisory (AV26-932)

10. “Cisco disclosed CVE-2026-76460 on Wednesday, describing it as an authentication bypass affecting Identity Services Engine (ISE) and ISE Passive Identity Connector (ISE-PIC).”

    The Register (security)News17 Sep 2026
    Cisco drops another exploited zero-day, this time a perfect 10

11. “The flaw, CVE-2026-76460, is due to insufficient control on an API endpoint.”

    Infosecurity MagazineNews17 Sep 2026
    Cisco Warns of Active Exploitation of Critical ISE Flaw

12. “Vier kwetsbaarheden, CVE-2026-20130, CVE-2026-20192, CVE-2026-76423 en CVE-2026-76460, hebben een CVSS-score van 10,0.”

    NCSC-NL advisoriesGovernment17 Sep 2026
    NCSC-2026-0382 [1.00] [H/H] Kwetsbaarheden verholpen in Cisco Identity Services Engine (ISE)

13. “CVE-2026-76460”

    Cisco PSIRTVendor16 Sep 2026
    Cisco Advance Notification for Publication of September 16, 2026, Security Advisories

14. “CVE-2026-76460”

    Cisco PSIRTVendor16 Sep 2026
    Cisco Identity Services Engine Authentication Bypass Vulnerability

15. “CVE-2026-76460 Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability”

    CISA advisoriesGovernment16 Sep 2026
    CISA Adds Two Known Exploited Vulnerabilities to Catalog

Also named with it: CVE-2026-76461, CVE-2026-76423, CVE-2026-20192, CVE-2026-20130, CVE-2026-87886, CVE-2026-87491, CVE-2025-39964, CVE-2026-53266, CVE-2026-58704, CVE-2026-20307, CVE-2026-20234, CVE-2026-91843, CVE-2026-20176, CVE-2026-20211, CVE-2026-20284, CVE-2026-20305, CVE-2026-20306, CVE-2026-20194, CVE-2026-20237, CVE-2025-39682