Cisco warns of second actively exploited zero-day in two days, max-severity ISE flaw

Cisco disclosed a second actively exploited zero-day in as many days, this time a maximum-severity vulnerability in Identity Services Engine (ISE), which has now seen three exploited flaws since June 2025. The rapid succession of zero-days targeting a security product suggests coordinated or opportunistic threat activity, raising concerns about network access control integrity. Details on exploitation scope and patches remain limited, but the pattern indicates heightened risk for enterprises relying on ISE.