Cisco Identity Services Engine (ISE) contains a critical authentication bypass vulnerability, CVE-2026-76460, caused by insufficient authentication controls on an API endpoint. The vulnerability has a CVSS score of 10.0 (Critical) and can be exploited remotely without authentication or user interaction. An attacker can send a specially crafted request to the affected API endpoint to bypass authentication. Successful exploitation can provide unauthorized access through the web-based management interface. The vulnerability affects Cisco ISE and ISE Passive Identity Connector (ISE-PIC) across supported releases, including 3.1, 3.2, 3.3, 3.4, and 3.5. Cisco also reports that active exploitation of this vulnerability is occurring. Successful exploitation may allow attackers to obtain root-level command execution on affected devices, potentially enabling extensive system compromise.
We recommend you to refer below link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ISE-ABP-VNSW7Tn5[/subscribe_to_unlock_form]
Cisco Identity Services Engine (ISE) contains a critical authentication bypass vulnerability, CVE-2026-76460, caused by insufficient authentication controls on an API endpoint. The vulnerability has a CVSS score of 10.0 (Critical) and can be exploited remotely without authentication or user interaction. An attacker can send a specially crafted request to the affected API endpoint to bypass authentication. Successful exploitation can provide unauthorized access through the web-based management interface. The vulnerability affects Cisco ISE and ISE Passive Identity Connector (ISE-PIC) across supported releases, including 3.1, 3.2, 3.3, 3.4, and 3.5. Cisco also reports that active exploitation of this vulnerability is occurring. Successful exploitation may allow attackers to obtain root-level command execution on affected devices, potentially enabling extensive system compromise.
We recommend you to refer below link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ISE-ABP-VNSW7Tn5[emaillocker id="1283"]
The following reports contain further technical details:
[/emaillocker]