Cisco ISE Vulnerability With CVSS 10.0 Score Under Active Attack

Cisco released patches for CVE-2026-76460, a critical (CVSS 10.0) authentication-bypass flaw in Identity Services Engine (ISE) that allows unauthenticated attackers to gain root command execution via a vulnerable API. Cisco confirmed active exploitation and CISA added the flaw to its Known Exploited Vulnerabilities catalog; vendors advise immediate patching, restricting internet exposure, checking logs for suspicious activity, and applying fixed releases for ISE 3.1–3.5 (3.0 is EOL).