Cisco Identity Services Engine Authentication Bypass – Actively Exploited

**Executive Summary:** Cisco disclosed CVE-2026-76460, a critical (CVSS 3.1 10.0) unauthenticated authentication-bypass in Cisco Identity Services Engine (ISE) and ISE Passive Identity Connector that grants remote attackers unauthorized management access and possible root-level command execution; Cisco PSIRT confirms active exploitation and CISA added the CVE to the Known Exploited Vulnerabilities catalog with an expedited BOD-26-04 remediation deadline. No workaround exists—organizations should immediately evaluate internet exposure, restrict management access via infrastructure ACLs, and apply the listed fixed releases for affected versions (3.1–3.5 patch releases).