CYBERSECURITYTRACKER
Permanent story citation

Cisco Zero-Day Highlights API Endpoint Authentication Issues

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 7815

As cited

Copy frozen at (site build).

vulnerabilities

Cisco Zero-Day Highlights API Endpoint Authentication Issues

Cisco disclosed an authentication bypass vulnerability, CVE-2026-76460, affecting Identity Services Engine (ISE) that received a critical CVSS 10.0 score. The flaw enables unauthorized access via an unauthenticated application programming interface (API) endpoint.

Why it matters: Organizations running Cisco ISE must patch immediately, as this vulnerability is actively exploited and allows unauthenticated attackers to compromise identity and access control systems.

VendorsCisco
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary