We need answer only headline <=90 chars. Need new factual headline. Must share no five-word sequence with external source. Facts: Cisco Iden

Key points

• Cisco ISE has a maximum-severity authentication bypass (CVE-2026-76460).
• The flaw stems from API endpoint authentication issues.
• CVSS 10.0 indicates critical risk.
• Immediate patching or mitigation is required.

Cisco has disclosed a vulnerability in its Identity Services Engine (ISE) that permits attackers to bypass authentication. Tracked as CVE-2026-76460, the flaw carries a CVSS score of 10.0, the highest possible. The issue arises from problems with authentication at API endpoints.

Organizations using Cisco ISE for network access control, identity management, and policy enforcement are at risk. This includes government, education, and enterprise networks. The K-12 sector, which often relies on ISE for secure access to wireless and wired networks, could be impacted.

An authentication bypass allows an attacker to gain unauthorized access without valid credentials. With a maximum severity rating, this could lead to full compromise of the ISE deployment, potentially exposing sensitive data and enabling lateral movement. The API endpoint flaw might be remotely exploitable.

Cisco ISE is widely deployed. This vulnerability is critical because it undermines the core security function of the product. While no active exploitation has been reported, the severity demands immediate attention. Cisco has likely released patches or mitigations.

Monitor Cisco advisories for updates. Apply patches as soon as possible. If patches are unavailable, restrict API access and monitor logs for suspicious authentication attempts. Given the CVSS 10.0, treat as emergency.

What to do now

1. Apply Cisco's patch for CVE-2026-76460 immediately upon release.
2. If patching is delayed, disable or restrict external access to ISE API endpoints.
3. Review authentication logs for unauthorized API access attempts.
4. Segment networks to limit exposure of ISE management interfaces.
5. Enforce multi-factor authentication for all administrative accounts.
6. Subscribe to Cisco security advisories for real-time updates.
7. Conduct a risk assessment and prepare contingency plans.

CVE references

• CVE-2026-76460

Original source

Dark Reading