CVE-2026-76460
Cisco Identity Services Engine Authentication Bypass Vulnerability
CVSS Score
10.0
EPSS Score
0.0%
EPSS Percentile
0th
A vulnerability in an API of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to bypass authentication. This vulnerability is due to insufficient authentication control on an API endpoint. An attacker could exploit this vulnerability by sending a crafted request to an affected API endpoint. A successful exploit could allow the attacker to gain unauthorized access to the affected device by bypassing the web-based management interface.
| CWE | CWE-648 |
| Vendor | cisco |
| Product | cisco identity services engine software |
| Ecosystems | |
| Industries | NetworkingTelecommunications |
| Published | Sep 16, 2026 |
| Last Updated | Sep 16, 2026 |
⚠️ Actively Exploited — Act Now
Get instant alerts for cisco cisco identity services engine software
This vulnerability is actively exploited in the wild. Set up free real-time alerts so you're first to know about threats like CVE-2026-76460.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Changed
Confidentiality
High
Integrity
High
Availability
High
Affected Versions
Cisco / Cisco Identity Services Engine Software
3.1.0 p8 3.1.0 p9 3.3 Patch 2 3.3 Patch 1 3.3 Patch 3 3.4.0 3.2.0 p7 3.3 Patch 4 3.4 Patch 1 3.1.0 p10 3.3 Patch 5 3.3 Patch 6 3.4 Patch 2 3.3 Patch 7 3.4 Patch 3 3.5.0 3.4 Patch 4 3.3 Patch 8 3.2 Patch 8 3.5 Patch 1 3.3 Patch 9 3.2 Patch 9 3.4 Patch 5 3.5 Patch 3 3.5 Patch 2 3.3 Patch 10 3.3 Patch 11 3.4 Patch 6 3.2 Patch 10 3.1.0 p11
Cisco / Cisco ISE Passive Identity Connector
3.4.0 3.5.0