Active Exploitation Triggers Emergency Patch for Cisco ISE Zero-Day

Cisco released emergency patches for a maximum-severity (CVSS 10.0) zero-day (CVE-2026-76460) in Identity Services Engine (ISE) that permits remote, unauthenticated attackers to bypass authentication and potentially achieve root-level command execution; the flaw is being actively exploited, has no workaround, and was added to CISA's KEV with a three-day federal remediation deadline, so organizations should patch immediately, tighten management-interface access, and hunt for prior compromise.