Cisco just disclosed 3 critical ISE vulnerabilities with a CVSS of 10.0 Unauthenticated ...

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Cisco ISE Vulnerabilities Achieve Maximum CVSS Score of 10.0 Cisco disclosed three critical vulnerabilities in its Identity Services Engine (ISE), each receiving a CVSS score of 10.0. These vulnerabilities allow unauthenticated remote root access, posing significant risks to affected systems. The flaws include a Remote Code Execution (RCE) vulnerability identified as CVE-2025-4660. 2 sources 55