Cisco alerts customers to second actively exploited zero-day in as many days

**Executive summary:** Cisco disclosed CVE-2026-76460, a critical zero-day vulnerability in Cisco Identity Services Engine that was actively exploited to bypass authentication and gain full control of affected appliances; Cisco published patches and indicators of compromise, CISA added the bug to its known exploited vulnerabilities catalog, and there are no available workarounds.