Cisco Warns of New Zero-Day ISE Auth Bypass (CVSS 10.0) Exploited in Active Attacks

Cisco warned of a maximum-severity zero-day vulnerability in Identity Services Engine (ISE), tracked as CVE-2026-76460 with a CVSS score of 10.0, that is under active exploitation. The flaw allows an unauthenticated, remote attacker to bypass authentication due to insufficient authentication control on an API endpoint, Cisco said. The company urged immediate patching and mitigation measures.