CISA Adds Two Known Exploited Vulnerabilities to Catalog

High · CISA Advisories ·

CISA KEV · Exploited

What happened

CISA added CVE-2026-76460 (Cisco ISE privileged API misuse) and CVE-2026-87886 (Acronis Backup default permissions) to KEV, citing active exploitation. Users of these products are at risk.

What to do now

Verify vendor advisories and patch immediately. Prioritize internet-facing Cisco ISE and Acronis Backup; restrict management access, audit/remove excessive permissions, monitor logs for exploitation. Apply vendor mitigations if patching delayed.

CVE references

  • CVE-2026-76460
  • CVE-2026-87886

Original source

CISA Advisories

AI-assisted analysis, sources cited. Verify with the vendor advisory before acting.

← All cyber news