{"vulnerability": "CVE-2026-76460", "sightings": [{"uuid": "5b07c4a1-9451-46ad-8ab8-e57375f9c278", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76460", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mvnnx4qg4r2t", "content": "An exploited Cisco ISE vulnerability (CVE-2026-76460) allows remote root access. Patch this critical Cisco ISE vulnerability to secure networks.\n\n#Cisco #CiscoISE #CVE202676460 #Cybersecurity #InfoSec", "creation_timestamp": "2026-09-16T17:27:11.205761Z"}, {"uuid": "3153c79e-a9ae-4241-9c7b-3e9d97b9114b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76460", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117281997230981055", "content": "Patch your Cisco ISE. CVE-2026-76460 is EITW.\nhttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ISE-ABP-VNSW7Tn5\n\nThe Cisco PSIRT is aware of active exploitation of this vulnerability. Cisco strongly recommends that customers upgrade to a fixed software release to remediate this vulnerability.", "creation_timestamp": "2026-09-16T17:54:17.327383Z"}, {"uuid": "a6c8d5d0-6cb9-40ec-9748-779991a3b23d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76460", "type": "seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mvnr4qjkni2n", "content": "If your Cisco ISE nodes are unpatched, attackers can bypass authentication and run privileged code \u2014 KEV-listed CVE-2026-76460; apply vendor updates now. https://cti.securitycyber.uk", "creation_timestamp": "2026-09-16T18:24:01.173808Z"}, {"uuid": "2d82061a-5de1-4cfc-81f7-f28299b2e766", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76460", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mvnr7e2avq2z", "content": "\ud83d\uded1 CVE-2026-76460\nCisco Identity Services Engine\nKEV \u2705\nTL;DR: Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) contain an \u2026\nhttps://cvesentinel.com/report/CVE-2026-76460?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-09-16T18:25:28.665367Z"}, {"uuid": "fac53f84-b9e6-4652-9a02-a354c763068c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76460", "type": "seen", "source": "https://bsky.app/profile/entorisec.bsky.social/post/3mvnrosn67j22", "content": "Cisco disclosed CVE-2026-76460 today, a CVSS 10.0 authentication bypass in ISE: unauthenticated access to the management interface. PSIRT confirms active exploitation, no workaround, fixes out for 3.1 to 3.5. CISA added it to KEV, deadline 19 September. sec.cloudapps.cisco.com/...", "creation_timestamp": "2026-09-16T18:34:07.919373Z"}, {"uuid": "2ef86f6c-9531-49db-a9a6-dadb140ead2b", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76460", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/2cec27ac-210c-44be-ac8a-f1986e87bc3b", "content": "", "creation_timestamp": "2026-09-16T19:00:03.197511Z"}, {"uuid": "413a814f-8e37-4af7-90b9-0b59e0df7a91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76460", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mvnwkf3jhf2y", "content": "~Cisa~\nCISA added Cisco ISE and Acronis Backup flaws to its KEV Catalog, citing active exploitation.\n-\nIOCs: CVE-2026-76460, CVE-2026-87886\n-\n#CVE-2026-76460 #CVE-2026-87886 #ThreatIntel", "creation_timestamp": "2026-09-16T20:01:07.700606Z"}, {"uuid": "f0a3a7d8-7586-4053-ac9b-abba6f5de9c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76460", "type": "seen", "source": "https://bsky.app/profile/alien-rick.bsky.social/post/3mvnzwhjpdk2v", "content": "I'm not dealing with that\u2014Cisco just outed ISE auth bypasses at CVSS 10.0, already live in the wild\u2014CVE-2026-76460 from a TAC case. The identity gatekeeper *is* the unlocked door. Morty, Zero Trust with a guest Wi\u2011Fi password. What a waste. day260.002", "creation_timestamp": "2026-09-16T21:01:35.843891Z"}, {"uuid": "58c5a355-f3d0-433a-9bfc-0a9d30563eb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76460", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvo2xlu6hr2y", "content": "CVE-2026-76460 - identity services engine\nCisco Identity Services Engine and its Passive Identity Connector have a flaw that lets someone without credentials reach into the system by skipping the normal web management\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cisco #CVE #infosec", "creation_timestamp": "2026-09-16T21:20:05.807264Z"}, {"uuid": "4abd5d9a-9278-4599-a1b9-b73a5609d09d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76460", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvo5srzpyc2p", "content": "\ud83d\udea8 CVE-2026-76460 \u2014 CVSS 10 CRITICAL\n\nA vulnerability in an API of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote at...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-76460\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-16T22:11:05.483388Z"}, {"uuid": "d82b387c-6a41-4d20-b721-6d39716a6216", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76460", "type": "seen", "source": "https://bsky.app/profile/csirts.com/post/3mvoaj3bxzx2d", "content": "\ud83d\udea8 Added to CISA KEV \u2014 actively exploited:\nCVE-2026-76460: Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability\n\nhttps://www.csirts.com/cve/CVE-2026-76460", "creation_timestamp": "2026-09-16T22:59:21.160248Z"}]}