CVE-2026-76460

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

September 16, 2026

Last Seen

October 9, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical Zero-Day Vulnerability in Cisco ISE Under Active Exploitation89.0

Cisco has disclosed a critical vulnerability (CVE-2026-76460) in its Identity Services Engine (ISE) that allows unauthenticated remote attackers to bypass authentication via a flaw in an API endpoint. This vulnerability has a CVSS score of 10.0 and is actively being exploited in the wild, prompting...

Critical Cisco FMC Vulnerabilities Under Active Exploitation88.3

Cisco's Secure Firewall Management Center (FMC) Software has two critical vulnerabilities, CVE-2026-20079 and CVE-2026-20316, that are currently being exploited by state-sponsored and ransomware actors. CVE-2026-20079, rated 10.0 on the CVSS scale, allows unauthenticated remote attackers to bypass a...

Critical Authentication Bypass in Cisco Catalyst SD-WAN Manager Exploited80.3

On September 30, 2026, Cisco disclosed a critical vulnerability (CVE-2026-76504) in the Catalyst SD-WAN Manager that allows unauthenticated remote attackers to bypass authentication and gain admin-level access to the system. This flaw stems from improper handling of URI encoding in HTTP requests, en...

Plugin4Shell: Zero-Click RCE Vulnerability in Major AI Coding Agents72.8

Plugin4Shell is a critical zero-click remote code execution vulnerability affecting four major AI coding agents: Claude Code, Codex, GitHub Copilot, and Gemini CLI. Discovered by AIR Security, this flaw allows attackers to exploit trusted plugin marketplaces by swapping legitimate plugins with malic...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (8)

AI-Powered Android Malware RedHat Survives Deletion and Steals Banking Credentials

Sep 18·11 sources

1 / 2

Related Entities

Zero-day Exploit Command Injection Data Breach Malware Phishing Sql Injection Supply Chain Attack Cisco Google CVE-2026-76423 CVE-2026-76504 CVE-2026-20305

CVE-2026-76460

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Public Exploits

CVE Details

Related Clusters (8)

Critical Zero-Day Vulnerability in Cisco ISE Under Active Exploitation

Critical Cisco FMC Vulnerabilities Under Active Exploitation

Critical Authentication Bypass in Cisco Catalyst SD-WAN Manager Exploited

Plugin4Shell: Zero-Click RCE Vulnerability in Major AI Coding Agents

AI-Powered Android Malware RedHat Survives Deletion and Steals Banking Credentials

Critical WordPress Vulnerabilities Expose Sites to Remote Code Execution

Critical Command Injection Vulnerability in Tenable Identity Exposure SaaS

Google Releases AndroidX Security State Libraries for Enhanced Device Security

Related Articles (20)

Tenable Identity Exposure SaaS Has CVSS 9.9 Command Injection That Hands Attackers ...

Tenable Identity Exposure SaaS Has CVSS 9.9 Command Injection That Hands Attackers ...

Cisco Nexus 9000 Silicon One RCE: Default Ports Leave Data Center Backbone Open to ...

Cisco Nexus 9000 Silicon One RCE: Default Ports Leave Data Center Backbone Open to ...

Critical Cisco Catalyst SD-WAN Zero

Cisco warns of actively exploited SD-WAN zero-day

WordPress Local File Inclusion to Remote Code Execution Vulnerability (CVE-2026-87902)

WordPress Pre-Authentication Remote Code Execution Vulnerability “Click2Shell” (CVE-Unknown)

Data stealing Android malware survives deletion, Microsoft execs call AI scraping labour theft

Android apps can now check security patches down to individual device components

Zero-click RCE vulnerability hit four major AI coding agents, two remain unpatched

Cisco Warns of Active Exploitation of Critical ISE Flaw

Unauthenticated attackers are bypassing Cisco ISE's management interface (CVE-2026-76460)

Warning about cyberattacks on Google Pixel, Cisco ISE, and Acronis Backup

Cisco warns of max severity ISE zero

Active Exploitation Triggers Emergency Patch for Cisco ISE Zero-Day

Cisco Warns of New Zero-Day ISE Auth Bypass (CVSS 10.0) Exploited in Active Attacks

The Gatekeeper Is the Door: Cisco ISE's Nine

Cisco ISE's Nine-CVE Disclosure and the Identity Infrastructure Attack Surface

The Gatekeeper Is the Door: Cisco ISE's Nine

Related Entities