CVE-2026-76460

EUVD-2026-81122
A vulnerability in an API of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to bypass authentication.

This vulnerability is due to insufficient authentication control on an API endpoint. An attacker could exploit this vulnerability by sending a crafted request to an affected API endpoint. A successful exploit could allow the attacker to gain unauthorized access to the affected device by bypassing the web-based management interface.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
10 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 99.52%
Affected Products (NVD)
VendorProductVersion
ciscoidentity_services_engine
3.1.0
ciscoidentity_services_engine
3.1.0:patch1
ciscoidentity_services_engine
3.1.0:patch10
ciscoidentity_services_engine
3.1.0:patch11
ciscoidentity_services_engine
3.1.0:patch2
ciscoidentity_services_engine
3.1.0:patch3
ciscoidentity_services_engine
3.1.0:patch4
ciscoidentity_services_engine
3.1.0:patch5
ciscoidentity_services_engine
3.1.0:patch6
ciscoidentity_services_engine
3.1.0:patch7
ciscoidentity_services_engine
3.1.0:patch8
ciscoidentity_services_engine
3.1.0:patch9
ciscoidentity_services_engine
3.2.0
ciscoidentity_services_engine
3.2.0:patch1
ciscoidentity_services_engine
3.2.0:patch10
ciscoidentity_services_engine
3.2.0:patch2
ciscoidentity_services_engine
3.2.0:patch3
ciscoidentity_services_engine
3.2.0:patch4
ciscoidentity_services_engine
3.2.0:patch5
ciscoidentity_services_engine
3.2.0:patch6
ciscoidentity_services_engine
3.2.0:patch7
ciscoidentity_services_engine
3.2.0:patch8
ciscoidentity_services_engine
3.2.0:patch9
ciscoidentity_services_engine
3.3.0
ciscoidentity_services_engine
3.3.0:patch1
ciscoidentity_services_engine
3.3.0:patch10
ciscoidentity_services_engine
3.3.0:patch11
ciscoidentity_services_engine
3.3.0:patch2
ciscoidentity_services_engine
3.3.0:patch3
ciscoidentity_services_engine
3.3.0:patch4
ciscoidentity_services_engine
3.3.0:patch5
ciscoidentity_services_engine
3.3.0:patch6
ciscoidentity_services_engine
3.3.0:patch7
ciscoidentity_services_engine
3.3.0:patch8
ciscoidentity_services_engine
3.3.0:patch9
ciscoidentity_services_engine
3.4.0
ciscoidentity_services_engine
3.4.0:patch1
ciscoidentity_services_engine
3.4.0:patch2
ciscoidentity_services_engine
3.4.0:patch3
ciscoidentity_services_engine
3.4.0:patch4
ciscoidentity_services_engine
3.4.0:patch5
ciscoidentity_services_engine
3.4.0:patch6
ciscoidentity_services_engine
3.5.0
ciscoidentity_services_engine
3.5.0:patch1
ciscoidentity_services_engine
3.5.0:patch2
ciscoidentity_services_engine
3.5.0:patch3
ciscoidentity_services_engine_passive_identity_connector
3.1.0
ciscoidentity_services_engine_passive_identity_connector
3.1.0:patch1
ciscoidentity_services_engine_passive_identity_connector
3.1.0:patch10
ciscoidentity_services_engine_passive_identity_connector
3.1.0:patch11
ciscoidentity_services_engine_passive_identity_connector
3.1.0:patch2
ciscoidentity_services_engine_passive_identity_connector
3.1.0:patch3
ciscoidentity_services_engine_passive_identity_connector
3.1.0:patch4
ciscoidentity_services_engine_passive_identity_connector
3.1.0:patch5
ciscoidentity_services_engine_passive_identity_connector
3.1.0:patch6
ciscoidentity_services_engine_passive_identity_connector
3.1.0:patch7
ciscoidentity_services_engine_passive_identity_connector
3.1.0:patch8
ciscoidentity_services_engine_passive_identity_connector
3.1.0:patch9
ciscoidentity_services_engine_passive_identity_connector
3.2.0
ciscoidentity_services_engine_passive_identity_connector
3.2.0:patch1
ciscoidentity_services_engine_passive_identity_connector
3.2.0:patch10
ciscoidentity_services_engine_passive_identity_connector
3.2.0:patch2
ciscoidentity_services_engine_passive_identity_connector
3.2.0:patch3
ciscoidentity_services_engine_passive_identity_connector
3.2.0:patch4
ciscoidentity_services_engine_passive_identity_connector
3.2.0:patch5
ciscoidentity_services_engine_passive_identity_connector
3.2.0:patch6
ciscoidentity_services_engine_passive_identity_connector
3.2.0:patch7
ciscoidentity_services_engine_passive_identity_connector
3.2.0:patch8
ciscoidentity_services_engine_passive_identity_connector
3.2.0:patch9
ciscoidentity_services_engine_passive_identity_connector
3.3.0
ciscoidentity_services_engine_passive_identity_connector
3.3.0:patch1
ciscoidentity_services_engine_passive_identity_connector
3.3.0:patch10
ciscoidentity_services_engine_passive_identity_connector
3.3.0:patch11
ciscoidentity_services_engine_passive_identity_connector
3.3.0:patch2
ciscoidentity_services_engine_passive_identity_connector
3.3.0:patch3
ciscoidentity_services_engine_passive_identity_connector
3.3.0:patch4
ciscoidentity_services_engine_passive_identity_connector
3.3.0:patch5
ciscoidentity_services_engine_passive_identity_connector
3.3.0:patch6
ciscoidentity_services_engine_passive_identity_connector
3.3.0:patch7
ciscoidentity_services_engine_passive_identity_connector
3.3.0:patch8
ciscoidentity_services_engine_passive_identity_connector
3.3.0:patch9
ciscoidentity_services_engine_passive_identity_connector
3.4.0
ciscoidentity_services_engine_passive_identity_connector
3.4.0:patch1
ciscoidentity_services_engine_passive_identity_connector
3.4.0:patch2
ciscoidentity_services_engine_passive_identity_connector
3.4.0:patch3
ciscoidentity_services_engine_passive_identity_connector
3.4.0:patch4
ciscoidentity_services_engine_passive_identity_connector
3.4.0:patch5
ciscoidentity_services_engine_passive_identity_connector
3.4.0:patch6
𝑥
= Vulnerable software versions
Common Weakness Enumeration
Vulnerability Media Exposure
References
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ISE-ABP-VNSW7Tn5
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-76460