Keyword

auth-bypass

4 dispatches · latest 17 SEP 2026 · all keywords →

exploits

The Gatekeeper Is the Door: One Unauthenticated API Call to Root on Cisco ISE (CVE-2026-76460)

A single crafted request to an unauthenticated REST endpoint in Cisco Identity Services Engine bypasses the management interface entirely and lands at root. CVSS 10, actively exploited, no workarounds. CISA's federal due date is Saturday.

Critical severity, 4 of 4. Act now — exploited, or trivially exploitable on an exposed service.CVSS 10.0Exploited in the wildKEV due 19 SEP 2026CVE-2026-76460
ciscokevauth-bypass
exploits

LiteLLM's MCP Endpoint Trusted Any Bearer Token It Was Handed: One Header, Full Tool Access

CVE-2026-59822 lets an unauthenticated attacker open an authenticated LiteLLM MCP session with a fabricated Authorization header — the OAuth2 passthrough fallback replaced failed key validation with an empty auth object. CVSS v4 8.8, fixed in 1.84.0, on KEV with a Sep 16 due date.

High severity, 3 of 4. Patch at your next window. Real impact, real exposure.CVSS 8.8Exploited in the wildKEV due 16 SEP 2026CVE-2026-59822 +1
litellmai-gatewaymcp