CVE-2026-76460: Cisco ISE Flaw Actively Exploited

**CVE-2026-76460** is a critical (CVSS 10.0) unauthenticated authentication-bypass vulnerability in Cisco Identity Services Engine (ISE) and ISE Passive Identity Connector (ISE-PIC) that can yield root privileges; active exploitation has been observed and the issue is listed in CISA's Known Exploited Vulnerabilities catalog. The advisory lists affected releases and first fixed patch levels, warns that no full workaround exists (iACLs can only reduce exposure), and instructs organizations to patch every node, hunt for signs of compromise, preserve evidence, and re-image systems if compromise is suspected.