https://reddit.com/r/sysadmin/comments/1wp9n8z/psa_cisco_ise_cvss_100_cve202676460_actively/: PSA: Cisco ISE CVSS 10.0 (CVE-2026-76460) — actively exploited, no workarounds
Published Sep 24, 2026
·Updated
Affected Software
1 affected component
Cisco Identity Services Engine
Frequently Asked Questions
1
Does exploitation require valid Cisco ISE credentials?
No. The issue is described as an API authentication bypass that can provide root access without authentication.
2
Which Cisco ISE versions are affected?
Every supported version is reported to be affected.
3
Is there a temporary mitigation if emergency patching cannot happen immediately?
No workaround is reported. Emergency patching is advised because the issue is described as actively exploited and listed in CISA KEV.