NewsThe Hacker NewsPublic sectorEnergy & utilitiesICS / OT (industrial control)

    Cisco Warns of New Zero-Day ISE Auth Bypass (CVSS 10.0) Exploited in Active Attacks

    Cisco has warned of a fresh maximum-severity security flaw impacting Identity Services Engine (ISE) that has come under active exploitation. The vulnerability, tracked as CVE-2026-76460 (CVSS score: 10.0), could allow an unauthenticated, remote attacker to bypass authentication. "This vulnerability is due to insufficient authentication control on an API endpoint," Cisco said. "An attacker

    Linked advisories

    Affected vendors and products

    More on Zero-Day

    Other advisories

    Other news entries

    Source: https://thehackernews.com/2026/09/cisco-warns-of-new-zero-day-ise-auth.html

    ID