Skip to content
VulniPulse
Sign in
Highest advisory severityCritical Exploited CISA KEV 1 vendor · 2 advisories

CVE-2026-76460

CVE-2026-76460: 2 tracked advisory records across Cisco. CISA KEV listed; exploitation observed. Compare vendor sources and published fix guidance.

Compare the source-linked records below. Ratings and product/version details belong to each advisory; they are not a single CVE-wide score or proof that every listed product is affected. How VulniPulse collects and checks evidence.

NVD detail CVE.org

Vendor advisory comparison

Cisco

2 advisories
  • Advisory severityCritical10.0

    Critical [CVE-2026-76460] Cisco Identity Services Engine Authentication Bypass Vulnerability

    cisco-sa-ISE-ABP-VNSW7Tn5Source published Source updated

    A vulnerability in an API of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to bypass authentication. This vulnerability is due to insufficient authentication control on an API endpoint. An attacker could exploit this vulnerability by sending a crafted request to an affected API endpoint. A successful exploit could allow the attacker to gain unauthorized access to the affected device by bypassing the web-based management interface. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is part of a group of advisories. For a complete list of the advisories and links to them, see Cisco Advance Notification for Publication of September 16, 2026, Security Advisories.…

    Affected products in this advisory
    • ISE Passive Identity Connector
    • Identity Services Engine Software
    Source-reported affected versions
    • Scope: This vulnerability affects Cisco ISE and Cisco ISE Passive Identity Connector (ISE-PIC), regardless of device configuration.
    • Release 3.1 (first fixed: 3.1 Patch 12)
    • Release 3.2 (first fixed: 3.2 Patch 11)
    • Release 3.3 (first fixed: 3.3 Patch 12)

    2 more entries in the full advisory.

    Source-reported fixed versions
    • 3.1 Patch 12
    • 3.2 Patch 11
    • 3.3 Patch 12
    • 3.4 Patch 7

    1 more entries in the full advisory.

    Mitigation guidance
    • Upgrade to the first fixed release for your train per the Fixed Releases table in this advisory.
    • Release 3.1: upgrade to 3.1 Patch 12.
    • Release 3.2: upgrade to 3.2 Patch 11.
    • Release 3.3: upgrade to 3.3 Patch 12.

    2 more entries in the full advisory.

    Workarounds
    • There are no workarounds that address this vulnerability. However, there is a mitigation. To prevent remote exploitation of this vulnerability, use infrastructure access control lists (iACLs) to allow only required management and control plane traffic that is destined to the affected device.
    Full advisory and evidenceOpen source bulletin
  • Advisory severityUnrated

    Advisory [CVE-2026-20130 +23] Cisco Advance Notification for Publication of September 16, 2026, Security Advisories

    cisco-sa-notice-jfxK98ZPSource published Source updated

    This bulletin covers 24 CVEs. The products, versions, score and guidance below describe the bulletin; check its source for applicability to this specific CVE.

    On September 16, 2026, the Cisco Product Security Incident Response Team (PSIRT) published the advisories that are listed in the following tables. To remediate these vulnerabilities, Cisco strongly recommends that customers upgrade to the fixed software that is indicated in the advisories. For more information about changes in Cisco PSIRT vulnerability disclosure, see Strengthening the Foundation: A Predictable, Customer-Focused Response to AI-Accelerated Vulnerability Discovery. Cisco Identity Services Engine Title CVE ID SIR Base Score Critical 10.0 9.9 9.1 High 8.6 7.5

    Affected products in this advisory
    No product details extracted. Check the source bulletin.
    Source-reported affected versions
    Affected-version details not available in this record.
    Source-reported fixed versions
    No fixed-version detail extracted. This does not mean no fix exists.
    Mitigation guidance
    • To remediate these vulnerabilities, Cisco strongly recommends that customers upgrade to the fixed software that is indicated in the advisories.
    Full advisory and evidenceOpen source bulletin

Android app · Google Play

Monitor future Cisco CVEs from your phone.

Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.

Matching phone alertsOptional email delivery
Get CVE alertsSee app features