Piece of news of the day

ADVANCED SECURITY EUROPA

EOOD

Cisco Sounds the Alarm on Critical Flaw in Identity Services Engine: Urges Immediate Action

17 September 2026

Cisco has identified a critical flaw in its Cisco Identity Services Engine (ISE) product, with a maximum severity rating of 10.0.
The vulnerability, CVE-2026-76460, allows attackers to gain unauthorized access to affected devices by exploiting an API endpoint.
Customers are urged to upgrade their software to prevent exploitation, as there are no workarounds available.
The US CISA has added the vulnerability to its Known Exploited Vulnerabilities catalog, prompting Federal agencies to prioritize patching.
Cisco advises customers to check for signs of exploitation, such as suspicious usernames in access logs.
Successful exploitation could lead to attackers gaining root privilege, necessitating a thorough review of network and firewall logs for any indications of compromise.
Cisco's update is part of a series of advisories addressing various vulnerabilities.