Find notable cyber news and cases, enriched with sources, timelines, and signals.
Home Watchlists Beta Browse News Feed Stats About Contact

Cybersecurity and Infrastructure Security Agency (CISA) Known Exploited Vulnerabilities (KEV) Catalog ordered federal agencies to patch systems against CVE-2026-76460 for within

Public Sector Action
First reported
Last updated
Happening score
H score 37
3 unique sources, 4 articles

Summary

Hide ▲

CISA added CVE-2026-76460 to the Known Exploited Vulnerabilities (KEV) Catalog and ordered federal agencies to patch affected systems within three days after Cisco said the Cisco ISE and Cisco ISE Passive Identity Connector (ISE-PIC) authentication-bypass flaw was actively exploited. Cisco released fixes for the issue, said there are no workarounds, and advised administrators to inspect access.log files and re-image suspected nodes. The public-sector action compresses the remediation window for a high-risk flaw that can let a remote attacker bypass authentication in enterprise identity infrastructure.

Related Happenings

Arista mitigation guidance for Arista VeloCloud Orchestrator compensating controls for CVE-2026-93952

Advisory/Mitigation
H score53 First: 22.09.2026 15:29 Last: 22.09.2026 15:29 Sources 1

About this happening: Arista issued temporary mitigation steps for exposed VeloCloud Orchestrator (VCO) deployments while a fixed release is pending, limiting the risk from actively exploited...

Open Happening

Cisco ISE and ISE-PIC actively exploited authentication bypass (CVE-2026-76460)

Vulnerability
H score51 First: 17.09.2026 10:20 Last: 17.09.2026 10:20 Sources 1

How related: Cisco has warned customers of the active exploitation of a maximum severity flaw affecting its Cisco Identity Services Engine (ISE) product.

About this happening: Cisco ISE and Cisco ISE-PIC are facing CVE-2026-76460, a maximum-severity API authentication bypass that is actively exploited in the wild. The flaw lets remot...

Open Happening

Cisco Secure Email Gateway insufficient validation flaw (CVE-2026-76461)

Vulnerability
H score45 First: 15.09.2026 09:11 Last: 15.09.2026 09:11 Sources 1

About this happening: Cisco Secure Email Gateway devices are exposed to CVE-2026-76461, an actively exploited email-parsing flaw that can let an unauthenticated remote attacker execute...

Open Happening

CISA mitigation guidance for CISA Adds Cisco Secure FMC CVE-2026-20079 to KEV Sets Sept. 12 Deadline

Advisory/Mitigation
H score58 First: 10.09.2026 00:40 Last: 10.09.2026 00:40 Sources 1

How related: Cisco confirmed on September 9 that the vulnerability was being actively exploited, updating its advisory to say its Product Security Incident Response Team became aware of the attacks in August. CISA added the flaw to its Known Exploited Vulnerabilities (KEV) catalog the same day.

About this happening: CISA added CVE-2026-20079 to the KEV catalog and gave Federal Civilian Executive Branch agencies a September 12, 2026 deadline to secure affected Cisco Secur...

Open Happening

Cisco Secure Firewall ASA and FTD active DoS exploitation denial-of-service flaw (CVE-2026-20349)

Vulnerability
H score31 First: 11.08.2026 22:45 Last: 11.08.2026 22:45 Sources 1

About this happening: CVE-2026-20349 is being actively exploited against Cisco Secure Firewall ASA and FTD software, enabling crafted HTTP requests to trigger a remote denial of service...

Open Happening

Timeline

  1. 17.09.2026 10:20 5 articles · 13d ago

    CISA orders federal agencies to patch CVE-2026-76460 within three days

    Legal Policy Action Update

    CISA added CVE-2026-76460 to the Known Exploited Vulnerabilities (KEV) Catalog and ordered federal agencies to patch their systems within three days after Cisco said the Cisco ISE and Cisco ISE Passive Identity Connector (ISE-PIC) authentication-bypass flaw was actively exploited.

    Show sources
    Open in new tab
  2. 17.09.2026 10:20 1 articles · 13d ago

    Cisco releases fixes for the actively exploited Cisco ISE authentication bypass

    Mitigation Patch Update

    Cisco released security updates for CVE-2026-76460 in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC), warned that the flaw was actively exploited in the wild, said no workarounds exist, listed fixed releases for 3.1 Patch 12, 3.2 Patch 11, 3.3 Patch 12, 3.4 Patch 7, and 3.5 Patch 4, and shared indicators of compromise with advice to inspect access.log files and re-image suspected nodes.

    Show sources
    Open in new tab