VulnIntel

CVE-2026-76460

CVSS 10.0 · CRITICAL
EPSS p0
Lower risk — in the top 100% least-likely-to-be-exploited CVEs.
No patch reference
No patch/mitigation in references

Published 9/16/2026 · updated 9/16/2026 · CWE-648

Share
Get asset-aware triage

Summary

A vulnerability in an API of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to bypass authentication. This vulnerability is due to insufficient authentication control on an API endpoint. An attacker could exploit this vulnerability by sending a crafted request to an affected API endpoint. A successful exploit could allow the attacker to gain unauthorized access to the affected device by bypassing the web-based management interface.

CVSS 10.0 — CRITICAL

10.0 / 10
  • AV: Network
  • AC: Low complexity
  • PR: No privileges
  • UI: No user interaction
  • S: Scope changed
  • C: Confidentiality: High
  • I: Integrity: High
  • A: Availability: High

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

EPSS exploitation probability

0.0%

Percentile p0 — Lower risk — in the top 100% least-likely-to-be-exploited CVEs.

Timeline

  1. Sep 16, 2026 · Disclosed / published in NVD

Intel sources

Which upstream feeds returned data for this CVE, and when they were last fetched.

  • NVD· 8 days ago
  • CVE.org· 8 days ago
  • FIRST EPSS· 8 days ago
  • CISA KEV· no data
  • OSV· 8 days ago

References

Other2

Unlock the full report

See how CVE-2026-76460 hits your stack.

Free public data ends here. Sign in to correlate this CVE against your SBOM and assets, get an AI-grounded exploit chain, generate a ModSecurity virtual patch, and share findings with your team.

  • · Asset-aware CVSS & priority
  • · Grounded AI analysis (A–D graded)
  • · Auto-generated WAF / IPS rules
  • · Jira, SIEM, Slack, Teams delivery

No credit card · 100 free enrichments · analyst-grade citations.