https://reddit.com/r/cybersecurity/comments/1wp9l25/cisco_ise_scores_a_perfect_cvss_100/: Cisco ISE scores a perfect CVSS 10.0 — unauthenticated API bypass to root (CVE-2026-76460)

Q: Can network controls such as ACLs or a WAF mitigate this issue until systems are patched?

No. Cisco explicitly states that there are no workarounds, including ACL- or WAF-based mitigations; affected systems must be patched or remain exposed to the risk.

Q: What makes this issue especially urgent for ISE operators?

The issue was already being exploited in the wild before the patch was released, and CISA added it to the Known Exploited Vulnerabilities catalog on September 16. Successful exploitation provides root-level command execution on a network-access-control platform.

Q: Which ISE deployments are affected?

Every supported Cisco ISE version from 3.1 through 3.51 is affected. Exploitation does not require credentials, user interaction, or complex attack conditions.

Published Sep 24, 2026

Updated

Affected Software

1 affected component

Cisco Identity Services Engine (ISE)>=3.1<=3.51

Frequently Asked Questions

Can network controls such as ACLs or a WAF mitigate this issue until systems are patched?

No. Cisco explicitly states that there are no workarounds, including ACL- or WAF-based mitigations; affected systems must be patched or remain exposed to the risk.

What makes this issue especially urgent for ISE operators?

The issue was already being exploited in the wild before the patch was released, and CISA added it to the Known Exploited Vulnerabilities catalog on September 16. Successful exploitation provides root-level command execution on a network-access-control platform.

Which ISE deployments are affected?

Every supported Cisco ISE version from 3.1 through 3.51 is affected. Exploitation does not require credentials, user interaction, or complex attack conditions.