{"uuid": "d36fe123-6ccb-47f7-bad6-1f3c3a54d1a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76460", "type": "exploited", "source": "https://t.me/pphm_HackerNews/3194", "content": "\ud83d\udd34 Active Exploitation Triggers Emergency Patch for Cisco ISE Zero-Day\n\nCisco on Wednesday released urgent patches for a critical-severity authentication bypass vulnerability in Identity Services Engine (ISE) that has been exploited in the wild as a zero-day.\n\nTracked as CVE-2026-76460 (CVSS score of 10/10), the security defect impacts an API endpoint of the appliance, which does not apply sufficient authentication controls.\n\nThis allows an attacker to send crafted requests to the API and bypass the web-based management interface to gain access to the affected device.\n\nBoth Cisco ISE and ISE Passive Identity Connector (ISE-PIC) are affected, regardless of device configuration. While no workarounds exist, using infrastructure access control lists (iACLs) to restrict traffic to the affected device prevents remote exploitation.", "creation_timestamp": "2026-09-21T00:00:05.244454Z"}