Cisco ISE Zero-Day Auth Bypass: Max CVSS, No Patch Yet

Cisco disclosed a critical zero-day authentication bypass (CVE-2026-76460) in Identity Services Engine with a 10.0 CVSS score. The flaw allows unauthenticated remote attackers to bypass API endpoint authentication, potentially compromising network access control. No patch is available, and exploitation may be active, posing immediate risk to enterprise networks.