NewsDark Reading
Cisco Zero-Day Highlights API Endpoint Authentication Issues
Teaser from the source
The authentication bypass flaw CVE-2026-76460 impacts Cisco's Identity Services Engine (ISE) and received a maximum 10 out of 10 CVSS score.
This is the RSS-feed teaser. Read the full article at the original source.
Read at Dark ReadingLinked advisories
- CVE-2026-76460Cisco Identity Services Engine — Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability
- CVE-2026-76460Cisco ISE und ISE-PIC: Mehrere Schwachstellen
- CVE-2026-76460Cisco Identity Services Engine Authentication Bypass Vulnerability
- CVE-2026-76460Cisco Secure Firewall Management Center: Mehrere Schwachstellen
- CVE-2026-76460Cisco Identity Services Engine Software: fehlerhafte Nutzung privilegierter APIs
Affected vendors and products
More on Authentication
Other advisories
- Not ratedosv:CVE-2026-120192Presenton Desktop Authentication Middleware app_data information disclosure
- Not ratedosv:CVE-2026-120191Presenton API missing authentication
- Not ratedosv:CVE-2026-120201Jpom 2.10.0 through 2.11.12 Authentication Bypass via JPOM-USER-TOKEN Header
- Not ratedosv:CLEANSTART-2023-MT89346invalid authentication sequence could result in the hostapd process terminating due to missing state validation steps when processing the SAE confirm message when in hostapd/AP mode
- Not ratedosv:CLEANSTART-2023-FP61791Information disclosure and authentication bypass vulnerability exists in the Apache HTTP Server configuration bundled with ZoneMinder v1
- Not ratedosv:CLEANSTART-2024-TW95274mod_auth_openidc is an OpenID Certified™ authentication and authorization module for the Apache 2
- Not ratedosv:CLEANSTART-2024-XN73528fail2ban is a daemon to ban hosts that cause multiple authentication errors
- Not ratedosv:CLEANSTART-2024-DH33215use of hard-coded password vulnerability may allow authentication abuse
Other news entries
- Hackers exploit Cisco SD-WAN flaw to deploy custom KeyDrift malwareNewsBleepingComputer
- Cisco Catalyst SD-WAN Controller Authentication Bypass VulnerabilityNewsCisco PSIRT
- Microsoft urges Entra ID admins to migrate users to passkeysNewsBleepingComputer
- Hackers Target Critical Oracle E-Business Suite RCE Flaw Days After Security PatchNewsThe Hacker News
- American Organizations Under Attack: Skyw4lker Device Code Phishing Campaign ExposedNewsThe Hacker News
- HPE Patches Dozens of Critical Flaws in Networking ProductsNewsSecurityWeek
- Malicious downloads can trick AI coding agents into compromising themselvesNewsCSO Online
- Dual BIOS: The laptop security feature SMBs don’t know they needNewsCSO Online
ID