Keyword

cisco

2 dispatches · latest 17 SEP 2026 · all keywords →

exploits

The Gatekeeper Is the Door: One Unauthenticated API Call to Root on Cisco ISE (CVE-2026-76460)

A single crafted request to an unauthenticated REST endpoint in Cisco Identity Services Engine bypasses the management interface entirely and lands at root. CVSS 10, actively exploited, no workarounds. CISA's federal due date is Saturday.

Critical severity, 4 of 4. Act now — exploited, or trivially exploitable on an exposed service.CVSS 10.0Exploited in the wildKEV due 19 SEP 2026CVE-2026-76460
ciscokevauth-bypass
exploits

One Crafted Email = Root on Your Cisco Mail Gateway (CVE-2026-76461)

A SQL injection in Cisco Secure Email Gateway's AsyncOS email parser lets an unauthenticated attacker run arbitrary commands as root by delivering a single crafted email. No login, no exotic ports — just SMTP. CISA added it to KEV on 2026-09-14 with a due date of 2026-09-17.

Critical severity, 4 of 4. Act now — exploited, or trivially exploitable on an exposed service.CVSS 9.8Exploited in the wildKEV due 17 SEP 2026CVE-2026-76461
ciscoemail-gatewaykev