Cisco ISE Hit by Critical Zero-Day Vulnerability

A critical vulnerability has been identified in Cisco ISE (Identity Service Engine), allowing unauthenticated requests to bypass management login and potentially reach root control.

The issue, designated as CVE-2026-76460, is currently under active exploitation. To mitigate this risk, it is essential to upgrade to a fixed Cisco release immediately.

In the aftermath of the exploit, review ISE access logs and external firewall/network telemetry for potential compromise.