The week in numbers CVE WATCHTOWER logged 4,378 new vulnerabilities between September 14 and September 20, 2026. This weekly CVE report focuses on the flaws that matter most: the ones with confirmed exploitation. The overall volume was heavy, but the critical share stayed familiar. Here is the severity split across all 4,378 new entries. Critical: 369. High: 1,551. Medium: 1,004. Low: 167.

CVE-2026-76460 is a critical CVSS 10.0 authentication bypass in Cisco Identity Services Engine and ISE-PIC. Cisco confirms active exploitation and CISA has added the flaw to KEV.

Cisco disclosed CVE-2026-76460, a maximum-severity zero-day in Cisco Identity Services Engine (ISE) that was actively exploited before patching. The flaw lets a remote attacker bypass authentication, take full control of the device, and potentially move laterally across networks managed by ISE. #Cisco #CiscoISE #CVE-2026-76460

{{rh9e7yNRO}}

Amazon's threat intelligence team on Wednesday disclosed that it observed an advanced threat actor exploiting two then-zero-day security flaws in Cisco Identity Service Engine (ISE) and Citrix NetScaler ADC products as part of attacks designed to deliver custom malware. "This discovery highlights the trend of threat actors focusing on critical identity and network access control infrastructure –

Cisco has released emergency security updates for CVE-2026-76460, a maximum-severity authentication bypass flaw in Cisco Identity Services Engine (ISE) and ISE-PIC that attackers are actively exploiting. The company and CISA urged immediate patching, with Cisco also advising admins to hunt for signs of compromise and re-image affected systems if suspicious activity is found. #CiscoISE #CVE-2026-76460 #CISA

Cisco released multiple security advisories on September 16, 2026, addressing critical Cisco ISE vulnerabilities across enterprise deployments. These defects allow remote attackers to bypass authentication, inject arbitrary operating system commands, and seize root control. Therefore, system administrators must install the latest patches immediately to secure network access environments. Why This Threat Matters Sourced estimates show that tens of thousands of organizations deploy…

Cisco warned on September 16, 2026, about active attacks targeting a critical Cisco ISE vulnerability. The security flaw allows unauthenticated remote attackers to bypass web authentication and seize root privileges. Consequently, administrators must update their systems immediately to stop intrusions. TL;DR Cisco resolved a maximum-severity flaw in its Identity Services Engine. Attackers are actively exploiting this security defect in the wild.

Cisco has released patches for critical vulnerabilities in Identity Services Engine (ISE) and Webex Services that could enable remote code execution, root-level access, and user impersonation. Organizations are urged to apply updates immediately because no workarounds exist and the flaws affect widely used authentication and SSO integrations. #CiscoISE #WebexServices...

La solution Cisco Identity Services Engine est affectée par une faille de sécurité permettant d'obtenir les privilèges "root" sur les systèmes vulnérables.