EXPOSURES › CVE-2026-76460
CVE-2026-76460
HIGH ⌖ ON CISA KEV · EXPLOITEDAn unauthenticated remote attacker can bypass Cisco ISE's web management interface via incorrect privileged API use.
Cisco Identity Services Engine (ISE) and ISE-PIC allow unauthenticated remote attackers to gain unauthorized device access by bypassing the web-based management interface through incorrect use of privileged APIs. This exposes DIB organizations to unauthorized access and potential data breaches, requiring immediate patching and review of API usage policies. The vulnerability is actively exploited in CISA's KEV catalog, indicating a high risk of real-world compromise.
Shame score — A high-severity, actively exploited vulnerability in a critical identity management product that allows unauthenticated remote access, demonstrating significant avoidability and reputational risk.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) contain an incorrect use of privileged APIs vulnerability that could allow an unauthenticated, remote attacker to gain unauthorized access to the affected device by bypassing the web-based management interface.
| PRODUCT | STATUS |
|---|---|
| Cisco Cloudlock for Government Cisco Systems Inc. |
Authorized |
| Cisco Meraki for Government Cisco Systems Inc. |
In Process |
| Cisco SD-WAN for Government Cisco Systems Inc. |
In Process |
| Cisco Umbrella for Government Cisco Systems Inc. |
In Process |
| Cisco Unified Communications Manager Cloud for Government (Cisco UCM Cloud for Government) Cisco Systems Inc. |
Authorized |
| Duo Federal Duo Security (A Cisco Company) |
Authorized |
| WebEx Contact Center Enterprise for Government (WxCCE-G) Cisco Systems Inc. |
In Process |
| Webex for Government Cisco Systems Inc. |
Authorized |