What Happened (Plain English)
High-risk Cisco Cisco Identity Services Engine Software weakness requires patching (CVE-2026-76460) affects Cisco Cisco Identity Services Engine Software. FIRST EPSS telemetry places exploitation probability at 75.60%. With a CVSS score of 10.0 (CRITICAL), security teams should verify affected deployments and prioritize remediation according to exposure.
A vulnerability in an API of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to bypass authentication. This vulnerability is due to insufficient authentication control on an API endpoint. An attacker could exploit this vulnerability by sending a crafted request to an affected API endpoint. A successful exploit could allow the attacker to gain unauthorized access to the affected device by bypassing the web-based management interface. Unpatched internet-facing or user-accessible instances risk unauthorized execution, data exposure, or service disruption.
Affected Software & Weakness
Vendor: Cisco · Product: Cisco Identity Services Engine Software · Versions: Cisco Identity Services Engine Software 3.1.0 p8, Cisco Identity Services Engine Software 3.1.0 p9, Cisco Identity Services Engine Software 3.3 Patch 2 · CWE: CWE-648
The Fix
Verify your installed Cisco Identity Services Engine Software version against Cisco's official security bulletin for CVE-2026-76460, apply the patched build in a staging ring first when possible, and confirm rollout across all production nodes.
Temporary Workarounds
If patching Cisco Cisco Identity Services Engine Software cannot happen today, place management ports behind VPN or zero-trust access, restrict untrusted network ingress, and enforce multi-factor authentication on administrative sessions.
Detection & Log Checks
Inspect Cisco Identity Services Engine Software application logs, perimeter firewall denies/allows, and EDR process trees for unusual child processes or outbound connections correlated with CVE-2026-76460 (CWE-648).
Frequently Asked Questions
Is CVE-2026-76460 actively exploited?
No KEV listing yet, but EPSS exploitation probability is 75.60%.
What is the fix for CVE-2026-76460?
Upgrade Cisco Identity Services Engine Software to Cisco's fixed software release for CVE-2026-76460 and restrict admin interfaces.
Which Cisco products are affected?
Cisco Cisco Identity Services Engine Software (Cisco Identity Services Engine Software 3.1.0 p8, Cisco Identity Services Engine Software 3.1.0 p9, Cisco Identity Services Engine Software 3.3 Patch 2).
How urgent is patching CVE-2026-76460?
Priority queue: THIS-WEEK (CVSS 10.0, EPSS 75.60%).
Official References
Last verified: 2026-11-13 · Defensive checklist only.