CVE-2026-76460

CRITICAL 10 KNOWN EXPLOITED ALL-YEARS

Published 2026-09-16 · Last modified 2026-10-07 · cisco · NVD: Analyzed

A vulnerability in an API of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to bypass authentication. This vulnerability is due to insufficient authentication control on an API endpoint. An attacker could exploit this vulnerability by sending a crafted request to an affected API endpoint. A successful exploit could allow the attacker to gain unauthorized access to the affected device by bypassing the web-based management interface.

ACTIVELY EXPLOITED

Confirmed exploited in the wild — in CISA KEV since 2026-09-16. Patch or mitigate now.

Exploitation likelihood

14.0%chance of exploitation in 30 days · 97th percentile

● In CISA KEV (2026-09-16)○ Public exploit / PoC◆ SSVC: exploitation active, automatable yes

Impact if exploited

10CVSS 3.1 · CRITICAL · CNA

ConfidentialityHigh
IntegrityHigh
AvailabilityHigh

What an attacker needs

✓Access: Reachable over the network — no local access needed
✓Privileges: No account or privileges required
✓User interaction: No user interaction needed
✓Complexity: No special conditions — reliably repeatable

✓ lowers the bar for an attacker · ⚠ raises it

Proof of concept & exploit code

No public exploit or proof-of-concept code is catalogued for this CVE (no ExploitDB, Nuclei, or CISA-KEV entry). It may still exist — search GitHub or check the references below.

Affected

Vendors Cisco

Products Cisco Identity Services Engine Software Cisco Ise Passive Identity Connector Identity Services Engine Identity Services Engine Passive Identity Connector

Weakness (CWE)

CWE-648: Incorrect Use of Privileged APIs

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Known Affected Software Configurations

Vendor	Product	Version range
Cisco	Identity Services Engine	3.1.0
Cisco	Identity Services Engine	3.1.0
Cisco	Identity Services Engine	3.1.0
Cisco	Identity Services Engine	3.1.0
Cisco	Identity Services Engine	3.1.0
Cisco	Identity Services Engine	3.1.0
Cisco	Identity Services Engine	3.1.0
Cisco	Identity Services Engine	3.1.0
Cisco	Identity Services Engine	3.1.0
Cisco	Identity Services Engine	3.1.0
Cisco	Identity Services Engine	3.1.0
Cisco	Identity Services Engine	3.1.0
Cisco	Identity Services Engine	3.2.0
Cisco	Identity Services Engine	3.2.0
Cisco	Identity Services Engine	3.2.0
Cisco	Identity Services Engine	3.2.0
Cisco	Identity Services Engine	3.2.0
Cisco	Identity Services Engine	3.2.0
Cisco	Identity Services Engine	3.2.0
Cisco	Identity Services Engine	3.2.0
Cisco	Identity Services Engine	3.2.0
Cisco	Identity Services Engine	3.2.0
Cisco	Identity Services Engine	3.2.0
Cisco	Identity Services Engine	3.3.0
Cisco	Identity Services Engine	3.3.0
Cisco	Identity Services Engine	3.3.0
Cisco	Identity Services Engine	3.3.0
Cisco	Identity Services Engine	3.3.0
Cisco	Identity Services Engine	3.3.0
Cisco	Identity Services Engine	3.3.0
Cisco	Identity Services Engine	3.3.0
Cisco	Identity Services Engine	3.3.0
Cisco	Identity Services Engine	3.3.0
Cisco	Identity Services Engine	3.3.0
Cisco	Identity Services Engine	3.3.0
Cisco	Identity Services Engine	3.4.0
Cisco	Identity Services Engine	3.4.0
Cisco	Identity Services Engine	3.4.0
Cisco	Identity Services Engine	3.4.0
Cisco	Identity Services Engine	3.4.0
Cisco	Identity Services Engine	3.4.0
Cisco	Identity Services Engine	3.4.0
Cisco	Identity Services Engine	3.5.0
Cisco	Identity Services Engine	3.5.0
Cisco	Identity Services Engine	3.5.0
Cisco	Identity Services Engine	3.5.0
Cisco	Identity Services Engine Passive Identity Connector	3.1.0
Cisco	Identity Services Engine Passive Identity Connector	3.1.0
Cisco	Identity Services Engine Passive Identity Connector	3.1.0
Cisco	Identity Services Engine Passive Identity Connector	3.1.0
Cisco	Identity Services Engine Passive Identity Connector	3.1.0
Cisco	Identity Services Engine Passive Identity Connector	3.1.0
Cisco	Identity Services Engine Passive Identity Connector	3.1.0
Cisco	Identity Services Engine Passive Identity Connector	3.1.0
Cisco	Identity Services Engine Passive Identity Connector	3.1.0
Cisco	Identity Services Engine Passive Identity Connector	3.1.0
Cisco	Identity Services Engine Passive Identity Connector	3.1.0
Cisco	Identity Services Engine Passive Identity Connector	3.1.0
Cisco	Identity Services Engine Passive Identity Connector	3.2.0
Cisco	Identity Services Engine Passive Identity Connector	3.2.0
Cisco	Identity Services Engine Passive Identity Connector	3.2.0
Cisco	Identity Services Engine Passive Identity Connector	3.2.0
Cisco	Identity Services Engine Passive Identity Connector	3.2.0
Cisco	Identity Services Engine Passive Identity Connector	3.2.0
Cisco	Identity Services Engine Passive Identity Connector	3.2.0
Cisco	Identity Services Engine Passive Identity Connector	3.2.0
Cisco	Identity Services Engine Passive Identity Connector	3.2.0
Cisco	Identity Services Engine Passive Identity Connector	3.2.0
Cisco	Identity Services Engine Passive Identity Connector	3.2.0
Cisco	Identity Services Engine Passive Identity Connector	3.3.0
Cisco	Identity Services Engine Passive Identity Connector	3.3.0
Cisco	Identity Services Engine Passive Identity Connector	3.3.0
Cisco	Identity Services Engine Passive Identity Connector	3.3.0
Cisco	Identity Services Engine Passive Identity Connector	3.3.0
Cisco	Identity Services Engine Passive Identity Connector	3.3.0
Cisco	Identity Services Engine Passive Identity Connector	3.3.0
Cisco	Identity Services Engine Passive Identity Connector	3.3.0
Cisco	Identity Services Engine Passive Identity Connector	3.3.0
Cisco	Identity Services Engine Passive Identity Connector	3.3.0
Cisco	Identity Services Engine Passive Identity Connector	3.3.0
Cisco	Identity Services Engine Passive Identity Connector	3.3.0
Cisco	Identity Services Engine Passive Identity Connector	3.4.0
Cisco	Identity Services Engine Passive Identity Connector	3.4.0
Cisco	Identity Services Engine Passive Identity Connector	3.4.0
Cisco	Identity Services Engine Passive Identity Connector	3.4.0
Cisco	Identity Services Engine Passive Identity Connector	3.4.0
Cisco	Identity Services Engine Passive Identity Connector	3.4.0
Cisco	Identity Services Engine Passive Identity Connector	3.4.0

All CVSS metrics

CRITICAL 10 v3.1 · CNA Primary
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CRITICAL 10 v3.1 · NVD Secondary
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

References

Patches & mitigations

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ISE-ABP-VNSW7Tn5 MitigationVendor Advisory

Advisories

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-76460 government-resourceUS Government Resource

Sources: NVD · CVE.org · EPSS