CVE-2026-76461

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

September 14, 2026

Last Seen

September 17, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical Zero-Day Vulnerability in Cisco ISE Under Active Exploitation89.0

Cisco has disclosed a critical vulnerability (CVE-2026-76460) in its Identity Services Engine (ISE) that allows unauthenticated remote attackers to bypass authentication via a flaw in an API endpoint. This vulnerability has a CVSS score of 10.0 and is actively being exploited in the wild, prompting...

Critical Zero-Day Vulnerability in Cisco Secure Email Gateway Exploited82.3

On September 14, 2026, Cisco disclosed a critical SQL injection vulnerability (CVE-2026-76461) in its Secure Email Gateway, allowing unauthenticated remote attackers to execute arbitrary commands with root privileges. This vulnerability arises from insufficient validation in the email parsing logic....

Iranian State Actors Deploy CHOSEN BRICK Spyware Against Dissidents78.0

On September 15, 2026, the UK, US, and Netherlands issued a joint advisory regarding a spyware campaign attributed to Iranian state actors targeting dissidents, activists, and journalists. The malware, known as CHOSEN BRICK, is delivered through spear-phishing attacks on messaging platforms like Wha...

Acronis Patches Critical cPanel Backup Plugin Vulnerability Exploited in Targeted Attacks72.0

Acronis has released urgent patches for a high-severity vulnerability (CVE-2026-87886) in its Backup plugin for cPanel & WHM and Plesk, which has been actively exploited in targeted attacks. The flaw, stemming from insecure file permissions, allows low-privileged attackers to escalate their privileg...