Cisco Warns of New Zero-Day ISE Auth Bypass (CVSS 10.0) Exploited in Active Attacks

Ce qui s'est passé

Cisco ISE has a CVSS 10.0 zero-day (CVE-2026-76460) allowing unauthenticated remote API auth bypass; actively exploited. Users of affected ISE versions are at risk.

À faire maintenant

Immediately apply Cisco's patch/mitigation; if unavailable, restrict ISE API exposure to trusted networks, disable unused API access, and monitor logs for anomalous auth bypass. Verify affected versions with Cisco advisory.

Références CVE

• CVE-2026-76460

Source originale

The Hacker News