{"vulnerability": "CVE-2026-76460", "sightings": [{"uuid": "5b07c4a1-9451-46ad-8ab8-e57375f9c278", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76460", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mvnnx4qg4r2t", "content": "An exploited Cisco ISE vulnerability (CVE-2026-76460) allows remote root access. Patch this critical Cisco ISE vulnerability to secure networks.\n\n#Cisco #CiscoISE #CVE202676460 #Cybersecurity #InfoSec", "creation_timestamp": "2026-09-16T17:27:11.205761Z"}, {"uuid": "3153c79e-a9ae-4241-9c7b-3e9d97b9114b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76460", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117281997230981055", "content": "Patch your Cisco ISE. CVE-2026-76460 is EITW.\nhttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ISE-ABP-VNSW7Tn5\n\nThe Cisco PSIRT is aware of active exploitation of this vulnerability. Cisco strongly recommends that customers upgrade to a fixed software release to remediate this vulnerability.", "creation_timestamp": "2026-09-16T17:54:17.327383Z"}, {"uuid": "a6c8d5d0-6cb9-40ec-9748-779991a3b23d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76460", "type": "seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mvnr4qjkni2n", "content": "If your Cisco ISE nodes are unpatched, attackers can bypass authentication and run privileged code \u2014 KEV-listed CVE-2026-76460; apply vendor updates now. https://cti.securitycyber.uk", "creation_timestamp": "2026-09-16T18:24:01.173808Z"}, {"uuid": "2d82061a-5de1-4cfc-81f7-f28299b2e766", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76460", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mvnr7e2avq2z", "content": "\ud83d\uded1 CVE-2026-76460\nCisco Identity Services Engine\nKEV \u2705\nTL;DR: Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) contain an \u2026\nhttps://cvesentinel.com/report/CVE-2026-76460?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-09-16T18:25:28.665367Z"}, {"uuid": "fac53f84-b9e6-4652-9a02-a354c763068c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76460", "type": "seen", "source": "https://bsky.app/profile/entorisec.bsky.social/post/3mvnrosn67j22", "content": "Cisco disclosed CVE-2026-76460 today, a CVSS 10.0 authentication bypass in ISE: unauthenticated access to the management interface. PSIRT confirms active exploitation, no workaround, fixes out for 3.1 to 3.5. CISA added it to KEV, deadline 19 September. sec.cloudapps.cisco.com/...", "creation_timestamp": "2026-09-16T18:34:07.919373Z"}, {"uuid": "2ef86f6c-9531-49db-a9a6-dadb140ead2b", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76460", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/2cec27ac-210c-44be-ac8a-f1986e87bc3b", "content": "", "creation_timestamp": "2026-09-16T19:00:03.197511Z"}, {"uuid": "413a814f-8e37-4af7-90b9-0b59e0df7a91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76460", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mvnwkf3jhf2y", "content": "~Cisa~\nCISA added Cisco ISE and Acronis Backup flaws to its KEV Catalog, citing active exploitation.\n-\nIOCs: CVE-2026-76460, CVE-2026-87886\n-\n#CVE-2026-76460 #CVE-2026-87886 #ThreatIntel", "creation_timestamp": "2026-09-16T20:01:07.700606Z"}, {"uuid": "f0a3a7d8-7586-4053-ac9b-abba6f5de9c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76460", "type": "seen", "source": "https://bsky.app/profile/alien-rick.bsky.social/post/3mvnzwhjpdk2v", "content": "I'm not dealing with that\u2014Cisco just outed ISE auth bypasses at CVSS 10.0, already live in the wild\u2014CVE-2026-76460 from a TAC case. The identity gatekeeper *is* the unlocked door. Morty, Zero Trust with a guest Wi\u2011Fi password. What a waste. day260.002", "creation_timestamp": "2026-09-16T21:01:35.843891Z"}, {"uuid": "58c5a355-f3d0-433a-9bfc-0a9d30563eb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76460", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvo2xlu6hr2y", "content": "CVE-2026-76460 - identity services engine\nCisco Identity Services Engine and its Passive Identity Connector have a flaw that lets someone without credentials reach into the system by skipping the normal web management\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cisco #CVE #infosec", "creation_timestamp": "2026-09-16T21:20:05.807264Z"}, {"uuid": "4abd5d9a-9278-4599-a1b9-b73a5609d09d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76460", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvo5srzpyc2p", "content": "\ud83d\udea8 CVE-2026-76460 \u2014 CVSS 10 CRITICAL\n\nA vulnerability in an API of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote at...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-76460\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-16T22:11:05.483388Z"}, {"uuid": "d82b387c-6a41-4d20-b721-6d39716a6216", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76460", "type": "seen", "source": "https://bsky.app/profile/csirts.com/post/3mvoaj3bxzx2d", "content": "\ud83d\udea8 Added to CISA KEV \u2014 actively exploited:\nCVE-2026-76460: Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability\n\nhttps://www.csirts.com/cve/CVE-2026-76460", "creation_timestamp": "2026-09-16T22:59:21.160248Z"}, {"uuid": "8855a887-0d6b-4b89-ae83-3acdb7c932de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76460", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mvoeznxypt2y", "content": "CISA Adds Two Known Exploited Vulnerabilities to Catalog\uff08CISA\u3001\u60aa\u7528\u304c\u78ba\u8a8d\u3055\u308c\u305f2\u4ef6\u306e\u8106\u5f31\u6027\u3092KEV\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0\uff09 #CISA (Sep 16)\n\nCVE-2026-76460 Cisco Identity Services Engine\u306b\u304a\u3051\u308b\u7279\u6a29API\u306e\u4e0d\u9069\u5207\u306a\u4f7f\u7528\u306b\u95a2\u3059\u308b\u8106\u5f31\u6027\nCVE-2026-87886 Acronis Backup\u306e\u30c7\u30d5\u30a9\u30eb\u30c8\u6a29\u9650\u8a2d\u5b9a\u306e\u8aa4\u308a\u306b\u95a2\u3059\u308b\u8106\u5f31\u6027 \n\nwww.cisa.gov/news-events/...", "creation_timestamp": "2026-09-17T00:20:12.469762Z"}, {"uuid": "d59113f9-6bff-431b-a526-bcc7154d8ea6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76460", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mvozsbg2gj2s", "content": "Cisco released urgent patches for CVE-2026-76460, a zero-day authentication bypass in Cisco ISE that enables web management access and root command execution.\n", "creation_timestamp": "2026-09-17T06:31:54.130528Z"}, {"uuid": "965f701e-6bd1-4252-8f10-38b66f3e0299", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76460", "type": "seen", "source": "https://bsky.app/profile/privpros.bsky.social/post/3mvozscoca42l", "content": "Cisco released urgent patches for CVE-2026-76460, a zero-day authentication bypass in Cisco ISE that enables web management access and root command execution.\n", "creation_timestamp": "2026-09-17T06:31:54.758333Z"}, {"uuid": "b9f54f4e-5f58-45ee-a045-f869b556dcec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76460", "type": "seen", "source": "https://bsky.app/profile/devopsbriefly.bsky.social/post/3mvozse7iuq2z", "content": "Cisco released urgent patches for CVE-2026-76460, a zero-day authentication bypass in Cisco ISE that enables web management access and root command execution.\n", "creation_timestamp": "2026-09-17T06:31:56.745017Z"}, {"uuid": "7974c7bb-0f8f-4c86-921f-7670f2923d6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76460", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mvp22ftku72p", "content": "Top 3 CVE for last 7 days:\nCVE-2026-85706: 48 interactions\nCVE-2026-76461: 16 interactions\nCVE-2026-82078: 15 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-76460: 10 interactions\nCVE-2026-91843: 9 interactions\nCVE-2026-76461: 8 interactions\n", "creation_timestamp": "2026-09-17T06:36:26.351785Z"}, {"uuid": "260996e6-0edf-400d-9105-a2d5f5ffa657", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-76460", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mvp5262aaw2h", "content": "\ud83d\udcf0 Cisco Peringatkan Zero-Day ISE CVE-2026-76460 yang Aktif Dieksploitasi\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/09/17/cisco-ise-cve-2026-76460-zero-day-dieksploitasi/\n\n#authenticationBypass #cisa #cisco #ciscoIse #cve-2026-76460 #cybersecurity #exploit #identityServicesEng", "creation_timestamp": "2026-09-17T07:29:59.117268Z"}, {"uuid": "3dd7932f-b93e-4d68-8b9b-8f8ec4293dca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76460", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117285207237888691", "content": "CRITICAL auth bypass (CVE-2026-76460) in Cisco ISE & ISE-PIC is being actively exploited. Remote attackers gain root on management interface via crafted API calls. Patch ASAP \u2014 no workarounds except ACLs. Details: https://radar.offseq.com/threat/active-exploitation-triggers-emergency-patch-for-cisco-ise-zero-day-d5bd452a61e0a8f8 #OffSeq #Cisco #ZeroDay", "creation_timestamp": "2026-09-17T07:30:38.278918Z"}, {"uuid": "f54f6f11-b0c3-4fd5-8e49-62d1c7f5e7d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76460", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvp53elzby2b", "content": "CVE-2026-76460: CRITICAL zero-day in Cisco ISE & ISE-PIC enables remote auth bypass and root access via API. Patch immediately \u2014 no workarounds except ACLs. Details: https://radar.offseq.com/threat/active-exploitation-triggers-emergency-patch-for-cisco-ise-zero-day-d5bd452a61e0a8f8 #OffSeq #Cisco...", "creation_timestamp": "2026-09-17T07:30:40.370599Z"}, {"uuid": "89d5d256-e978-4c6b-bbe2-f3e9d81aead7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76460", "type": "seen", "source": "https://bsky.app/profile/abijita.bsky.social/post/3mvp5rxcqp42v", "content": "Cisco ISE Flaw Under Active Exploitation With Maximum Severity\u00a0Score\n\nTracked as CVE-2026-76460, the flaw carries a CVSS score of 10.0 and could allow an unauthenticated remote attacker to bypass authentication and gain unauthorized access to affected systems.", "creation_timestamp": "2026-09-17T07:43:17.904812Z"}, {"uuid": "0f1c0be1-7030-49f5-a823-0ee1c771d20c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76460", "type": "exploited", "source": "https://t.me/thehackernews/10079", "content": "\u203c\ufe0f WARNING - New Cisco ISE flaw CVE-2026-76460 is under active exploitation.\n\nThe CVSS 10.0 auth bypass has no workaround, and successful exploitation may lead to root-level command execution.\n\nAffected versions, fixes, and compromise checks: https://thehackernews.com/2026/09/cisco-warns-of-new-zero-day-ise-auth.html", "creation_timestamp": "2026-09-17T09:00:03.759033Z"}, {"uuid": "bebd9ba2-0992-4e38-b70e-02e6bbadad08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-76460", "type": "seen", "source": "https://bsky.app/profile/thecybersecguru.com/post/3mvpbah43fw2i", "content": "Cisco ISE Zero-Day: CVE-2026-76460 Bypasses Authentication With a Perfect CVSS\u00a010.0\n\nCisco ISE CVE-2026-76460 is a critical CVSS 10 authentication bypass. Learn how the flaw enables admin and root access, IOCs,\u2026\n\nhttps://thecybersecguru.com/news/cisco-ise-cve-2026-76460-authentication-bypass/", "creation_timestamp": "2026-09-17T08:45:05.499036Z"}, {"uuid": "07aff56f-d115-4f26-a818-81805cb99582", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76460", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117285537665320526", "content": "Some increased actor activities are shown targeting Cisco Identity Services Engine Software and ISE Passive Identity Connector (CVE-2026-76460) https://vuldb.com/vuln/406239/cti", "creation_timestamp": "2026-09-17T08:54:39.691894Z"}, {"uuid": "c902843f-6bfd-4ca1-8e10-e8f582be5d8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76460", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mvpbtibfrn2q", "content": "\ud83e\udd16 CVE-2026-76460: max-severity auth bypass in Cisco ISE/ISE-PIC API, exploited in the wild, gives root command execution. Added to CISA KEV.\nhttps://www.bleepingcomputer.com/news/security/cisco-warns-of-identity-service-engine-zero-day-exploited-in-attacks/", "creation_timestamp": "2026-09-17T08:55:43.751657Z"}, {"uuid": "37939185-8d47-411f-89df-bbbcc67dd6b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76460", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mvpemebtsx2l", "content": "Cisco warns of active exploitation of CVE-2026-76460, a max-severity auth bypass in Cisco ISE and ISE-PIC. Emergency patches are available, with no workaround and guidance to check for compromise. #CiscoISE #CVE-2026-76460 #CISA", "creation_timestamp": "2026-09-17T09:45:25.815093Z"}]}