<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-16T23:18:39.376718+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/d82b387c-6a41-4d20-b721-6d39716a6216/export</id>
    <title>d82b387c-6a41-4d20-b721-6d39716a6216</title>
    <updated>2026-09-16T23:18:39.404435+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "d82b387c-6a41-4d20-b721-6d39716a6216", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76460", "type": "seen", "source": "https://bsky.app/profile/csirts.com/post/3mvoaj3bxzx2d", "content": "\ud83d\udea8 Added to CISA KEV \u2014 actively exploited:\nCVE-2026-76460: Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability\n\nhttps://www.csirts.com/cve/CVE-2026-76460", "creation_timestamp": "2026-09-16T22:59:21.160248Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/d82b387c-6a41-4d20-b721-6d39716a6216/export"/>
    <published>2026-09-16T22:59:21.160248+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/4abd5d9a-9278-4599-a1b9-b73a5609d09d/export</id>
    <title>4abd5d9a-9278-4599-a1b9-b73a5609d09d</title>
    <updated>2026-09-16T23:18:39.406643+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "4abd5d9a-9278-4599-a1b9-b73a5609d09d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76460", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvo5srzpyc2p", "content": "\ud83d\udea8 CVE-2026-76460 \u2014 CVSS 10 CRITICAL\n\nA vulnerability in an API of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote at...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-76460\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-16T22:11:05.483388Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/4abd5d9a-9278-4599-a1b9-b73a5609d09d/export"/>
    <published>2026-09-16T22:11:05.483388+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/58c5a355-f3d0-433a-9bfc-0a9d30563eb9/export</id>
    <title>58c5a355-f3d0-433a-9bfc-0a9d30563eb9</title>
    <updated>2026-09-16T23:18:39.406816+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "58c5a355-f3d0-433a-9bfc-0a9d30563eb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76460", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvo2xlu6hr2y", "content": "CVE-2026-76460 - identity services engine\nCisco Identity Services Engine and its Passive Identity Connector have a flaw that lets someone without credentials reach into the system by skipping the normal web management\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cisco #CVE #infosec", "creation_timestamp": "2026-09-16T21:20:05.807264Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/58c5a355-f3d0-433a-9bfc-0a9d30563eb9/export"/>
    <published>2026-09-16T21:20:05.807264+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/f0a3a7d8-7586-4053-ac9b-abba6f5de9c7/export</id>
    <title>f0a3a7d8-7586-4053-ac9b-abba6f5de9c7</title>
    <updated>2026-09-16T23:18:39.406946+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "f0a3a7d8-7586-4053-ac9b-abba6f5de9c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76460", "type": "seen", "source": "https://bsky.app/profile/alien-rick.bsky.social/post/3mvnzwhjpdk2v", "content": "I'm not dealing with that\u2014Cisco just outed ISE auth bypasses at CVSS 10.0, already live in the wild\u2014CVE-2026-76460 from a TAC case. The identity gatekeeper *is* the unlocked door. Morty, Zero Trust with a guest Wi\u2011Fi password. What a waste. day260.002", "creation_timestamp": "2026-09-16T21:01:35.843891Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/f0a3a7d8-7586-4053-ac9b-abba6f5de9c7/export"/>
    <published>2026-09-16T21:01:35.843891+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/413a814f-8e37-4af7-90b9-0b59e0df7a91/export</id>
    <title>413a814f-8e37-4af7-90b9-0b59e0df7a91</title>
    <updated>2026-09-16T23:18:39.407074+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "413a814f-8e37-4af7-90b9-0b59e0df7a91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76460", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mvnwkf3jhf2y", "content": "~Cisa~\nCISA added Cisco ISE and Acronis Backup flaws to its KEV Catalog, citing active exploitation.\n-\nIOCs: CVE-2026-76460, CVE-2026-87886\n-\n#CVE-2026-76460 #CVE-2026-87886 #ThreatIntel", "creation_timestamp": "2026-09-16T20:01:07.700606Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/413a814f-8e37-4af7-90b9-0b59e0df7a91/export"/>
    <published>2026-09-16T20:01:07.700606+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/2ef86f6c-9531-49db-a9a6-dadb140ead2b/export</id>
    <title>2ef86f6c-9531-49db-a9a6-dadb140ead2b</title>
    <updated>2026-09-16T23:18:39.407177+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "2ef86f6c-9531-49db-a9a6-dadb140ead2b", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76460", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/2cec27ac-210c-44be-ac8a-f1986e87bc3b", "content": "", "creation_timestamp": "2026-09-16T19:00:03.197511Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/2ef86f6c-9531-49db-a9a6-dadb140ead2b/export"/>
    <published>2026-09-16T19:00:03.197511+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/fac53f84-b9e6-4652-9a02-a354c763068c/export</id>
    <title>fac53f84-b9e6-4652-9a02-a354c763068c</title>
    <updated>2026-09-16T23:18:39.407278+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "fac53f84-b9e6-4652-9a02-a354c763068c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76460", "type": "seen", "source": "https://bsky.app/profile/entorisec.bsky.social/post/3mvnrosn67j22", "content": "Cisco disclosed CVE-2026-76460 today, a CVSS 10.0 authentication bypass in ISE: unauthenticated access to the management interface. PSIRT confirms active exploitation, no workaround, fixes out for 3.1 to 3.5. CISA added it to KEV, deadline 19 September. sec.cloudapps.cisco.com/...", "creation_timestamp": "2026-09-16T18:34:07.919373Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/fac53f84-b9e6-4652-9a02-a354c763068c/export"/>
    <published>2026-09-16T18:34:07.919373+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/2d82061a-5de1-4cfc-81f7-f28299b2e766/export</id>
    <title>2d82061a-5de1-4cfc-81f7-f28299b2e766</title>
    <updated>2026-09-16T23:18:39.407386+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "2d82061a-5de1-4cfc-81f7-f28299b2e766", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76460", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mvnr7e2avq2z", "content": "\ud83d\uded1 CVE-2026-76460\nCisco Identity Services Engine\nKEV \u2705\nTL;DR: Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) contain an \u2026\nhttps://cvesentinel.com/report/CVE-2026-76460?utm_source=bluesky&amp;amp;utm_medium=social&amp;amp;utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-09-16T18:25:28.665367Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/2d82061a-5de1-4cfc-81f7-f28299b2e766/export"/>
    <published>2026-09-16T18:25:28.665367+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/a6c8d5d0-6cb9-40ec-9748-779991a3b23d/export</id>
    <title>a6c8d5d0-6cb9-40ec-9748-779991a3b23d</title>
    <updated>2026-09-16T23:18:39.407482+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "a6c8d5d0-6cb9-40ec-9748-779991a3b23d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76460", "type": "seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mvnr4qjkni2n", "content": "If your Cisco ISE nodes are unpatched, attackers can bypass authentication and run privileged code \u2014 KEV-listed CVE-2026-76460; apply vendor updates now. https://cti.securitycyber.uk", "creation_timestamp": "2026-09-16T18:24:01.173808Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/a6c8d5d0-6cb9-40ec-9748-779991a3b23d/export"/>
    <published>2026-09-16T18:24:01.173808+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/3153c79e-a9ae-4241-9c7b-3e9d97b9114b/export</id>
    <title>3153c79e-a9ae-4241-9c7b-3e9d97b9114b</title>
    <updated>2026-09-16T23:18:39.407595+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "3153c79e-a9ae-4241-9c7b-3e9d97b9114b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76460", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117281997230981055", "content": "Patch your Cisco ISE. CVE-2026-76460 is EITW.\nhttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ISE-ABP-VNSW7Tn5\n\nThe Cisco PSIRT is aware of active exploitation of this vulnerability. Cisco strongly recommends that customers upgrade to a fixed software release to remediate this vulnerability.", "creation_timestamp": "2026-09-16T17:54:17.327383Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/3153c79e-a9ae-4241-9c7b-3e9d97b9114b/export"/>
    <published>2026-09-16T17:54:17.327383+00:00</published>
  </entry>
</feed>
