The Gatekeeper Is the Door: One Unauthenticated API Call to Root on Cisco ISE (CVE-2026-76460)
A single crafted request to an unauthenticated REST endpoint in Cisco Identity Services Engine bypasses the management interface entirely and lands at root. CVSS 10, actively exploited, no workarounds. CISA's federal due date is Saturday.
Critical severity, 4 of 4. Act now — exploited, or trivially exploitable on an exposed service.CVSS 10.0Exploited in the wildKEV due 19 SEP 2026CVE-2026-76460
ciscokevauth-bypass