Cisco Identity Services Engine Authentication Bypass Vulnerability
A vulnerability in an API of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to bypass authentication. This vulnerability is due to insufficient authentication control on an API endpoint. An attacker could exploit this vulnerability by sending a crafted request to an affected API endpoint. A successful exploit could allow the attacker to gain unauthorized access to the affected device by bypassing the web-based management interface. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
Read at Cisco PSIRT Security Advisories
- Vendor
- Cisco
- Product
- Identity Services Engine
- Fix
- available
- Exposure class
- Identity
Why it ranks 43 (Notable)
- Exposed product class: identity
- Widely deployed vendor product (Cisco)
- Covered by 3 independent sources
- Fix available
- Vendor security advisory
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- Cisco PSIRT Security Advisories (sec.cloudapps.cisco.com)
- CVE-2026-76460 on this site · NVD · CVE.org · Vulnpedia
Related coverage
Other items that share a CVE or were clustered with this one.