CVE
CVE-2026-76460
Cisco · Cisco Identity Services Engine Software; Cisco · Cisco ISE Passive Identity Connector
- First Reported
- Sep 17, 2026
- Latest Reported
- Oct 13, 2026
CVE Enrichment
- CVSS
- 10.0 CRITICAL
- EPSS
- 75.60%
- EPSS Percentile
- 99.52%
- CISA KEV
- YES — Known Exploited Vulnerability
Description
A vulnerability in an API of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to bypass authentication. This vulnerability is due to insufficient authentication control on an API endpoint. An attacker could exploit this vulnerability by sending a crafted request to an affected API endpoint. A successful exploit could allow the attacker to gain unauthorized access to the affected device by bypassing the web-based management interface.
Technical Details
- CVSS Version
- 3.1
- CNA / NVD Source
- [email protected]
- Published
- 17-Sep-2026 04:17
- Last Modified
- 08-Oct-2026 02:17
- EPSS Date
- 2026-10-26
- CWE
- CWE-648
CVSS Vector
CVSS:3.1 AV:N /
AC:L /
PR:N /
UI:N /
S:C /
C:H /
I:H /
A:H
CISA KEV Details
- Date Added
- 2026-09-16
- Remediation Due
- 2026-09-19
- Known Ransomware Campaign Use
- Unknown
- Required Action
- Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Notes
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ISE-ABP-VNSW7Tn5 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-76460
CNA Products / Version Status
- Cisco · Cisco ISE Passive Identity Connector
Source: CNA · [email protected]
Default status: unknown
3.4.0 — affected
3.5.0 — affected
- Cisco · Cisco Identity Services Engine Software
Source: CNA · [email protected]
Default status: unknown
3.1.0 p8 — affected
3.1.0 p9 — affected
3.3 Patch 2 — affected
3.3 Patch 1 — affected
3.3 Patch 3 — affected
3.4.0 — affected
3.2.0 p7 — affected
3.3 Patch 4 — affected
3.4 Patch 1 — affected
3.1.0 p10 — affected
3.3 Patch 5 — affected
3.3 Patch 6 — affected
3.4 Patch 2 — affected
3.3 Patch 7 — affected
3.4 Patch 3 — affected
3.5.0 — affected
3.4 Patch 4 — affected
3.3 Patch 8 — affected
3.2 Patch 8 — affected
3.5 Patch 1 — affected
3.3 Patch 9 — affected
3.2 Patch 9 — affected
3.4 Patch 5 — affected
3.5 Patch 3 — affected
3.5 Patch 2 — affected
3.3 Patch 10 — affected
3.3 Patch 11 — affected
3.4 Patch 6 — affected
3.2 Patch 10 — affected
3.1.0 p11 — affected
Affected Products / Versions
- cisco / identity_services_engine
Source: NVD CPE · affected
Version / affected range: 3.1.0
cpe:2.3:a:cisco:identity_services_engine:3.1.0:-:*:*:*:*:*:* - cisco / identity_services_engine
Source: NVD CPE · affected
Version / affected range: 3.1.0
cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch1:*:*:*:*:*:* - cisco / identity_services_engine
Source: NVD CPE · affected
Version / affected range: 3.1.0
cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch10:*:*:*:*:*:* - cisco / identity_services_engine
Source: NVD CPE · affected
Version / affected range: 3.1.0
cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch11:*:*:*:*:*:* - cisco / identity_services_engine
Source: NVD CPE · affected
Version / affected range: 3.1.0
cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch2:*:*:*:*:*:* - cisco / identity_services_engine
Source: NVD CPE · affected
Version / affected range: 3.1.0
cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch3:*:*:*:*:*:* - cisco / identity_services_engine
Source: NVD CPE · affected
Version / affected range: 3.1.0
cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch4:*:*:*:*:*:* - cisco / identity_services_engine
Source: NVD CPE · affected
Version / affected range: 3.1.0
cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch5:*:*:*:*:*:* - cisco / identity_services_engine
Source: NVD CPE · affected
Version / affected range: 3.1.0
cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch6:*:*:*:*:*:* - cisco / identity_services_engine
Source: NVD CPE · affected
Version / affected range: 3.1.0
cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch7:*:*:*:*:*:* - cisco / identity_services_engine
Source: NVD CPE · affected
Version / affected range: 3.1.0
cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch8:*:*:*:*:*:* - cisco / identity_services_engine
Source: NVD CPE · affected
Version / affected range: 3.1.0
cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch9:*:*:*:*:*:* - cisco / identity_services_engine
Source: NVD CPE · affected
Version / affected range: 3.2.0
cpe:2.3:a:cisco:identity_services_engine:3.2.0:-:*:*:*:*:*:* - cisco / identity_services_engine
Source: NVD CPE · affected
Version / affected range: 3.2.0
cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch1:*:*:*:*:*:* - cisco / identity_services_engine
Source: NVD CPE · affected
Version / affected range: 3.2.0
cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch10:*:*:*:*:*:* - cisco / identity_services_engine
Source: NVD CPE · affected
Version / affected range: 3.2.0
cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch2:*:*:*:*:*:* - cisco / identity_services_engine
Source: NVD CPE · affected
Version / affected range: 3.2.0
cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch3:*:*:*:*:*:* - cisco / identity_services_engine
Source: NVD CPE · affected
Version / affected range: 3.2.0
cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch4:*:*:*:*:*:* - cisco / identity_services_engine
Source: NVD CPE · affected
Version / affected range: 3.2.0
cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch5:*:*:*:*:*:* - cisco / identity_services_engine
Source: NVD CPE · affected
Version / affected range: 3.2.0
cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch6:*:*:*:*:*:* - cisco / identity_services_engine
Source: NVD CPE · affected
Version / affected range: 3.2.0
cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch7:*:*:*:*:*:* - cisco / identity_services_engine
Source: NVD CPE · affected
Version / affected range: 3.2.0
cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch8:*:*:*:*:*:* - cisco / identity_services_engine
Source: NVD CPE · affected
Version / affected range: 3.2.0
cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch9:*:*:*:*:*:* - cisco / identity_services_engine
Source: NVD CPE · affected
Version / affected range: 3.3.0
cpe:2.3:a:cisco:identity_services_engine:3.3.0:-:*:*:*:*:*:* - cisco / identity_services_engine
Source: NVD CPE · affected
Version / affected range: 3.3.0
cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch1:*:*:*:*:*:* - cisco / identity_services_engine
Source: NVD CPE · affected
Version / affected range: 3.3.0
cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch10:*:*:*:*:*:* - cisco / identity_services_engine
Source: NVD CPE · affected
Version / affected range: 3.3.0
cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch11:*:*:*:*:*:* - cisco / identity_services_engine
Source: NVD CPE · affected
Version / affected range: 3.3.0
cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch2:*:*:*:*:*:* - cisco / identity_services_engine
Source: NVD CPE · affected
Version / affected range: 3.3.0
cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch3:*:*:*:*:*:* - cisco / identity_services_engine
Source: NVD CPE · affected
Version / affected range: 3.3.0
cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch4:*:*:*:*:*:* - cisco / identity_services_engine
Source: NVD CPE · affected
Version / affected range: 3.3.0
cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch5:*:*:*:*:*:* - cisco / identity_services_engine
Source: NVD CPE · affected
Version / affected range: 3.3.0
cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch6:*:*:*:*:*:* - cisco / identity_services_engine
Source: NVD CPE · affected
Version / affected range: 3.3.0
cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch7:*:*:*:*:*:* - cisco / identity_services_engine
Source: NVD CPE · affected
Version / affected range: 3.3.0
cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch8:*:*:*:*:*:* - cisco / identity_services_engine
Source: NVD CPE · affected
Version / affected range: 3.3.0
cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch9:*:*:*:*:*:* - cisco / identity_services_engine
Source: NVD CPE · affected
Version / affected range: 3.4.0
cpe:2.3:a:cisco:identity_services_engine:3.4.0:-:*:*:*:*:*:* - cisco / identity_services_engine
Source: NVD CPE · affected
Version / affected range: 3.4.0
cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch1:*:*:*:*:*:* - cisco / identity_services_engine
Source: NVD CPE · affected
Version / affected range: 3.4.0
cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch2:*:*:*:*:*:* - cisco / identity_services_engine
Source: NVD CPE · affected
Version / affected range: 3.4.0
cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch3:*:*:*:*:*:* - cisco / identity_services_engine
Source: NVD CPE · affected
Version / affected range: 3.4.0
cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch4:*:*:*:*:*:* - cisco / identity_services_engine
Source: NVD CPE · affected
Version / affected range: 3.4.0
cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch5:*:*:*:*:*:* - cisco / identity_services_engine
Source: NVD CPE · affected
Version / affected range: 3.4.0
cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch6:*:*:*:*:*:* - cisco / identity_services_engine
Source: NVD CPE · affected
Version / affected range: 3.5.0
cpe:2.3:a:cisco:identity_services_engine:3.5.0:-:*:*:*:*:*:* - cisco / identity_services_engine
Source: NVD CPE · affected
Version / affected range: 3.5.0
cpe:2.3:a:cisco:identity_services_engine:3.5.0:patch1:*:*:*:*:*:* - cisco / identity_services_engine
Source: NVD CPE · affected
Version / affected range: 3.5.0
cpe:2.3:a:cisco:identity_services_engine:3.5.0:patch2:*:*:*:*:*:* - cisco / identity_services_engine
Source: NVD CPE · affected
Version / affected range: 3.5.0
cpe:2.3:a:cisco:identity_services_engine:3.5.0:patch3:*:*:*:*:*:* - cisco / identity_services_engine_passive_identity_connector
Source: NVD CPE · affected
Version / affected range: 3.1.0
cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:-:*:*:*:*:*:* - cisco / identity_services_engine_passive_identity_connector
Source: NVD CPE · affected
Version / affected range: 3.1.0
cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch1:*:*:*:*:*:* - cisco / identity_services_engine_passive_identity_connector
Source: NVD CPE · affected
Version / affected range: 3.1.0
cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch10:*:*:*:*:*:* - cisco / identity_services_engine_passive_identity_connector
Source: NVD CPE · affected
Version / affected range: 3.1.0
cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch11:*:*:*:*:*:* - cisco / identity_services_engine_passive_identity_connector
Source: NVD CPE · affected
Version / affected range: 3.1.0
cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch2:*:*:*:*:*:* - cisco / identity_services_engine_passive_identity_connector
Source: NVD CPE · affected
Version / affected range: 3.1.0
cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch3:*:*:*:*:*:* - cisco / identity_services_engine_passive_identity_connector
Source: NVD CPE · affected
Version / affected range: 3.1.0
cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch4:*:*:*:*:*:* - cisco / identity_services_engine_passive_identity_connector
Source: NVD CPE · affected
Version / affected range: 3.1.0
cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch5:*:*:*:*:*:* - cisco / identity_services_engine_passive_identity_connector
Source: NVD CPE · affected
Version / affected range: 3.1.0
cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch6:*:*:*:*:*:* - cisco / identity_services_engine_passive_identity_connector
Source: NVD CPE · affected
Version / affected range: 3.1.0
cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch7:*:*:*:*:*:* - cisco / identity_services_engine_passive_identity_connector
Source: NVD CPE · affected
Version / affected range: 3.1.0
cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch8:*:*:*:*:*:* - cisco / identity_services_engine_passive_identity_connector
Source: NVD CPE · affected
Version / affected range: 3.1.0
cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch9:*:*:*:*:*:* - cisco / identity_services_engine_passive_identity_connector
Source: NVD CPE · affected
Version / affected range: 3.2.0
cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:-:*:*:*:*:*:* - cisco / identity_services_engine_passive_identity_connector
Source: NVD CPE · affected
Version / affected range: 3.2.0
cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:patch1:*:*:*:*:*:* - cisco / identity_services_engine_passive_identity_connector
Source: NVD CPE · affected
Version / affected range: 3.2.0
cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:patch10:*:*:*:*:*:* - cisco / identity_services_engine_passive_identity_connector
Source: NVD CPE · affected
Version / affected range: 3.2.0
cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:patch2:*:*:*:*:*:* - cisco / identity_services_engine_passive_identity_connector
Source: NVD CPE · affected
Version / affected range: 3.2.0
cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:patch3:*:*:*:*:*:* - cisco / identity_services_engine_passive_identity_connector
Source: NVD CPE · affected
Version / affected range: 3.2.0
cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:patch4:*:*:*:*:*:* - cisco / identity_services_engine_passive_identity_connector
Source: NVD CPE · affected
Version / affected range: 3.2.0
cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:patch5:*:*:*:*:*:* - cisco / identity_services_engine_passive_identity_connector
Source: NVD CPE · affected
Version / affected range: 3.2.0
cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:patch6:*:*:*:*:*:* - cisco / identity_services_engine_passive_identity_connector
Source: NVD CPE · affected
Version / affected range: 3.2.0
cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:patch7:*:*:*:*:*:* - cisco / identity_services_engine_passive_identity_connector
Source: NVD CPE · affected
Version / affected range: 3.2.0
cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:patch8:*:*:*:*:*:* - cisco / identity_services_engine_passive_identity_connector
Source: NVD CPE · affected
Version / affected range: 3.2.0
cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:patch9:*:*:*:*:*:* - cisco / identity_services_engine_passive_identity_connector
Source: NVD CPE · affected
Version / affected range: 3.3.0
cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:-:*:*:*:*:*:* - cisco / identity_services_engine_passive_identity_connector
Source: NVD CPE · affected
Version / affected range: 3.3.0
cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch1:*:*:*:*:*:* - cisco / identity_services_engine_passive_identity_connector
Source: NVD CPE · affected
Version / affected range: 3.3.0
cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch10:*:*:*:*:*:* - cisco / identity_services_engine_passive_identity_connector
Source: NVD CPE · affected
Version / affected range: 3.3.0
cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch11:*:*:*:*:*:* - cisco / identity_services_engine_passive_identity_connector
Source: NVD CPE · affected
Version / affected range: 3.3.0
cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch2:*:*:*:*:*:* - cisco / identity_services_engine_passive_identity_connector
Source: NVD CPE · affected
Version / affected range: 3.3.0
cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch3:*:*:*:*:*:* - cisco / identity_services_engine_passive_identity_connector
Source: NVD CPE · affected
Version / affected range: 3.3.0
cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch4:*:*:*:*:*:* - cisco / identity_services_engine_passive_identity_connector
Source: NVD CPE · affected
Version / affected range: 3.3.0
cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch5:*:*:*:*:*:* - cisco / identity_services_engine_passive_identity_connector
Source: NVD CPE · affected
Version / affected range: 3.3.0
cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch6:*:*:*:*:*:* - cisco / identity_services_engine_passive_identity_connector
Source: NVD CPE · affected
Version / affected range: 3.3.0
cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch7:*:*:*:*:*:* - cisco / identity_services_engine_passive_identity_connector
Source: NVD CPE · affected
Version / affected range: 3.3.0
cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch8:*:*:*:*:*:* - cisco / identity_services_engine_passive_identity_connector
Source: NVD CPE · affected
Version / affected range: 3.3.0
cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch9:*:*:*:*:*:* - cisco / identity_services_engine_passive_identity_connector
Source: NVD CPE · affected
Version / affected range: 3.4.0
cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:-:*:*:*:*:*:* - cisco / identity_services_engine_passive_identity_connector
Source: NVD CPE · affected
Version / affected range: 3.4.0
cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:patch1:*:*:*:*:*:* - cisco / identity_services_engine_passive_identity_connector
Source: NVD CPE · affected
Version / affected range: 3.4.0
cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:patch2:*:*:*:*:*:* - cisco / identity_services_engine_passive_identity_connector
Source: NVD CPE · affected
Version / affected range: 3.4.0
cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:patch3:*:*:*:*:*:* - cisco / identity_services_engine_passive_identity_connector
Source: NVD CPE · affected
Version / affected range: 3.4.0
cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:patch4:*:*:*:*:*:* - cisco / identity_services_engine_passive_identity_connector
Source: NVD CPE · affected
Version / affected range: 3.4.0
cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:patch5:*:*:*:*:*:* - cisco / identity_services_engine_passive_identity_connector
Source: NVD CPE · affected
Version / affected range: 3.4.0
cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:patch6:*:*:*:*:*:*
References
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.
Reported Context (9)
- CVE-2026-76460 Recorded Future Reports 94 High-Impact Vulnerabilities in September 2026, Including 80 Actively Exploited
- Cisco confirms active exploitation of CVE-2026-76460, a CVSS 10.0 authentication bypass affecting ISE and ISE-PIC regardless of configuration. Cybersecurity roundup: Gemini reaches real companies in a test, flaws exploited
- One of them, CVE-2026-76460, is an authentication bypass in an API that allows an unauthenticated remote attacker to execute commands as root. InfraTrust Report Finds Exploited Flaws in Infrastructure Management Systems
- Unauthenticated attackers are bypassing Cisco ISE’s management interface (CVE-2026-76460) Week in Review: Cisco Zero-Day Exploitation, Revolut Breach and Other Security News
- Cisco disclosed CVE-2026-76460, a maximum-severity zero-day in Cisco Identity Services Engine (ISE) that was actively exploited before patching. Cisco patches actively exploited maximum-severity ISE zero-day
CVE (83)
Malware (8)
People (6)
Threat Actors (9)
MITRE ATT&CK (11)
Vendors (43)
Products (91)
Tools (10)
Industries (3)
Countries (6)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.