Cisco hit by max severity zero-day exploit targeting Identity Services Engine, so it's time to patch up
Both Cisco and CISA are warning about in-the-wild abuse.
Cisco has patched a critical zero-day exploit targeting its Identity Services Engine (ISE). The vulnerability, identified as CVE-2026-76460, allows unauthenticated remote attackers to bypass authentication and gain unauthorized access to affected devices. Cisco's Product Security Incident Response Team (PSIRT) has confirmed active exploitation of the flaw.
No workarounds exist; patching is the only solution. The bug is found in both Cisco ISE and Cisco ISE Passive Identity Connector (ISE-PIC), impacting all device configurations. CISA has added the vulnerability to its Known Exploited Vulnerabilities (KEV) catalog, requiring federal agencies to patch or disable ISE by September 19, 2026.
Cisco provided Indicators of Compromise (IoC) and advised users to watch for suspicious usernames in log files and consider re-imaging nodes as a precaution.
Written by urgent.news from TechRadar's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
