HIGHVulnerability
Verified
Global

CISA KEV: Cisco Identity Services Engine — Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability

·Source: CISA KEV

Updated:

Executive Summary

Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) contain an incorrect use of privileged APIs vulnerability that could allow an unauthenticated, remote attacker to gain unauthorized access to the affected device by bypassing the web-based management interface.

Analysis

Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) contain an incorrect use of privileged APIs vulnerability that could allow an unauthenticated, remote attacker to gain unauthorized access to the affected device by bypassing the web-based management interface. Added to CISA Known Exploited Vulnerabilities catalog on 2026-09-16. Remediation due: 2026-09-19.

Indicators of Compromise (1)

CVE (1)
CVE-2026-76460
NVDMITRE CVE
Source Attribution

Originally published by CISA KEV on Sep 16, 2026. Verified by: CISA.

Related Threats

MEDIUMVulnerability

Why TLP should not replace your internal information classification, (Sat, Oct 10th)

The Traffic Light Protocol (TLP)[1], which is now in its second incarnation, is a wonderful standard that enables one to easily communicate whether information may be shared further (and if so, how far).

SANS ISC
CRITICALVulnerability

NVD CRITICAL: CVE-2026-104803 — The WPCOM Member plugin for WordPress is vulnerable to Authentication Bypass in ...

The WPCOM Member plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.7.27 via the `uuid` and `code` parameters of the social-login callback handler registered on the `init` hook. The vulnerability exists because the `login` function's social-login flow performs no nonce validation, no OAuth state verification, and no per-visitor namespace isolation i

CVE-2026-104803
NIST NVD
CRITICALVulnerability

NVD CRITICAL: CVE-2026-104801 — The PPOM – Product Addons & Custom Fields for WooCommerce plugin for WordPress i...

The PPOM – Product Addons & Custom Fields for WooCommerce plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the rename_files function in all versions up to, and including, 34.0.10 This makes it possible for unauthenticated attackers to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is

CVE-2026-104801
NIST NVD