CISA Flags Actively Exploited Cisco ISE Flaw With No Workaround

The Cybersecurity and Infrastructure Security Agency (CISA) added a critical Cisco identity-management vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog after finding evidence that attackers are using the flaw. The vulnerability, tracked as Common Vulnerabilities and Exposures (CVE) identifier CVE-2026-76460, affects Cisco Identity Services Engine (ISE). Cisco assigned the flaw the maximum Common Vulnerability Scoring System score of 10.0 in a Sept.