CVE-2026-76460CISA KEV

Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability

CISA lists this Cisco Identity Services Engine vulnerability as known exploited. Check the cited references and original publisher guidance for affected products and remediation.

CISA KEV CISA-cited reference NVD

CISA catalog record

Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) contain an incorrect use of privileged APIs vulnerability that could allow an unauthenticated, remote attacker to gain unauthorized access to the affected device by bypassing the web-based management interface.

Product: Identity Services Engine
Added to KEV: 16 Sep 2026
Federal remediation due: 19 Sep 2026
Known ransomware use: Not reported
Public detection template: PublicNuclei template · template membership does not establish exploit availability or applicability to your systems.

What changed

Detection template: Nuclei template listed
29 Oct 2026
Detection template: Nuclei template listed
28 Oct 2026

Page history

Changes are dated when recorded; day views use the last saved version from that UTC day, and citations stay fixed.

Cite this version

Field-level log (16)

Up to 100 recent field edits are shown; older edits may be outside retention.

6 Nov 2026 · 17:32:22 UTC Source coverage: public-exploit-codeCurrent
6 Nov 2026 · 17:32:22 UTC Link: Nuclei templatehttps://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-76460.yaml
6 Nov 2026 · 16:31:02 UTC Source coverage: public-exploit-codeCurrent → Not collected
6 Nov 2026 · 16:31:02 UTC Link: Nuclei templatehttps://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-76460.yaml → No longer listed in this observation
2 Nov 2026 · 17:30:39 UTC Source coverage: public-exploit-codeCurrent
2 Nov 2026 · 17:30:39 UTC Link: Nuclei templatehttps://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-76460.yaml
2 Nov 2026 · 16:27:39 UTC Source coverage: public-exploit-codeCurrent → Not collected
2 Nov 2026 · 16:27:39 UTC Link: Nuclei templatehttps://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-76460.yaml → No longer listed in this observation
29 Oct 2026 · 20:19:26 UTC Public detection templateNuclei template listed
29 Oct 2026 · 20:19:26 UTC Link: Vendor advisoryhttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ISE-ABP-VNSW7Tn5 → No longer listed in this observation
29 Oct 2026 · 20:19:26 UTC Link: CISA-cited referencehttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ISE-ABP-VNSW7Tn5
28 Oct 2026 · 05:10:29 UTC Public exploit codeNuclei template listed
28 Oct 2026 · 05:10:29 UTC Source coverage: public-exploit-codeCurrent
28 Oct 2026 · 05:10:29 UTC Link: Nuclei templatehttps://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-76460.yaml
23 Oct 2026 · 09:33:49 UTC Source coverage: cisa-kevIncomplete → Current
23 Oct 2026 · 08:31:50 UTC Source coverage: cisa-kevCurrent → Incomplete

Explore global source statements, affected packages and advisory history for CVE-2026-76460. The catalog has a separate collection scope from Microsoft release records.

cve-program · CVE-2026-76460

Published

Cisco Identity Services Engine Software

Vendor product

Original vendor version evidence · not evaluated as a NuGet range

{
                    "vendor": "Cisco",
                    "product": "Cisco Identity Services Engine Software",
                    "versions": [
                        {
                            "version": "3.1.0 p8",
                            "status": "affected"
                        },
                        {
                            "version": "3.1.0 p9",
                            "status": "affected"
                        },
                        {
                            "version": "3.3 Patch 2",
                            "status": "affected"
                        },
                        {
                            "version": "3.3 Patch 1",
                            "status": "affected"
                        },
                        {
                            "version": "3.3 Patch 3",
                            "status": "affected"
                        },
                        {
                            "version": "3.4.0",
                            "status": "affected"
                        },
                        {
                            "version": "3.2.0 p7",
                            "status": "affected"
                        },
                        {
                            "version": "3.3 Patch 4",
                            "status": "affected"
                        },
                        {
                            "version": "3.4 Patch 1",
                            "status": "affected"
                        },
                        {
                            "version": "3.1.0 p10",
                            "status": "affected"
                        },
                        {
                            "version": "3.3 Patch 5",
                            "status": "affected"
                        },
                        {
                            "version": "3.3 Patch 6",
                            "status": "affected"
                        },
                        {
                            "version": "3.4 Patch 2",
                            "status": "affected"
                        },
                        {
                            "version": "3.3 Patch 7",
                            "status": "affected"
                        },
                        {
                            "version": "3.4 Patch 3",
                            "status": "affected"
                        },
                        {
                            "version": "3.5.0",
                            "status": "affected"
                        },
                        {
                            "version": "3.4 Patch 4",
                            "status": "affected"
                        },
                        {
                            "version": "3.3 Patch 8",
                            "status": "affected"
                        },
                        {
                            "version": "3.2 Patch 8",
                            "status": "affected"
                        },
                        {
                            "version": "3.5 Patch 1",
                            "status": "affected"
                        },
                        {
                            "version": "3.3 Patch 9",
                            "status": "affected"
                        },
                        {
                            "version": "3.2 Patch 9",
                            "status": "affected"
                        },
                        {
                            "version": "3.4 Patch 5",
                            "status": "affected"
                        },
                        {
                            "version": "3.5 Patch 3",
                            "status": "affected"
                        },
                        {
                            "version": "3.5 Patch 2",
                            "status": "affected"
                        },
                        {
                            "version": "3.3 Patch 10",
                            "status": "affected"
                        },
                        {
                            "version": "3.3 Patch 11",
                            "status": "affected"
                        },
                        {
                            "version": "3.4 Patch 6",
                            "status": "affected"
                        },
                        {
                            "version": "3.2 Patch 10",
                            "status": "affected"
                        },
                        {
                            "version": "3.1.0 p11",
                            "status": "affected"
                        }
                    ],
                    "defaultStatus": "unknown"
                }

Cisco ISE Passive Identity Connector

Vendor product

Original vendor version evidence · not evaluated as a NuGet range

{
                    "vendor": "Cisco",
                    "product": "Cisco ISE Passive Identity Connector",
                    "versions": [
                        {
                            "version": "3.4.0",
                            "status": "affected"
                        },
                        {
                            "version": "3.5.0",
                            "status": "affected"
                        }
                    ],
                    "defaultStatus": "unknown"
                }

Original source record · Cite this exact observation · Complete original publisher JSON