Description
A vulnerability in an API of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to bypass authentication.
This vulnerability is due to insufficient authentication control on an API endpoint. An attacker could exploit this vulnerability by sending a crafted request to an affected API endpoint. A successful exploit could allow the attacker to gain unauthorized access to the affected device by bypassing the web-based management interface.
Summary
CVE-2026-76460 is a critical vulnerability in the API of Cisco Identity Services Engine (ISE) that allows unauthenticated remote attackers to bypass authentication due to insufficient authentication control on an API endpoint. Exploiting this vulnerability could enable unauthorized access to the affected device by circumventing the web-based management interface.
Mitigation
To remediate this vulnerability, it is essential to implement proper authentication controls on the affected API endpoint to prevent unauthorized access. Regularly updating and patching the system is also recommended.
Weakness Classification (CWE)
Exploit Prediction (EPSS)
References
Primary Sources
Always verify findings against the primary CVE record before acting. Both sources below are public-domain and authoritative.
Does this affect your version?
Use the CVE Detector to check if a specific product version is impacted by this vulnerability, along with 100+ other CVEs.