Cisco Identity Services Engine - ise-kong API Gateway Authentication Bypass
CVE-2026-76460
Verified
Description
Cisco Identity Services Engine contains an authentication bypass caused by insufficient authentication control on an API endpoint, letting unauthenticated remote attackers gain unauthorized access, exploit requires crafted request to API endpoint.
Severity
Critical
CVSS Score
10
Exploit Probability
76%
Affected Product
identity_services_engine
Published Date
October 23, 2026
Template Author
0x_akoko
CVE-2026-76460.yaml
10.0Score
CVSS Metrics
CVSS Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVE ID:
cve-2026-76460
CWE ID:
cwe-648
Remediation Steps
Update to the latest available version with the fix.