Cisco Warns of Actively Exploited Zero-Day Auth Bypass in ISE

Cisco has issued an advisory for a maximum-severity vulnerability (CVE-2026-76460) impacting the Identity Services Engine, carrying a CVSS score of 10.0. The flaw stems from inadequate authentication checks on an API endpoint, allowing unauthenticated remote threat actors to bypass security controls. The vulnerability is currently being targeted in active exploits, requiring immediate attention from network administrators to apply available patches or mitigations.