[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fR0-YMMzNwpAZkwYfstHK8kFAHHzPNZsNNYkxMyWJP-U":3},{"article":4,"iocs":39,"watch_terms":44,"solutions":45,"lesson":110},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":26,"category":27,"article_tags":31},"62b8ed74-a551-42ef-9035-266f3d77a153","Cisco Zero-Day Highlights API Endpoint Authentication Issues","cisco-zero-day-highlights-api-endpoint-authentication-issues-4bd8cb","The authentication bypass flaw CVE-2026-76460 impacts Cisco's Identity Services Engine (ISE) and received a maximum 10 out of 10 CVSS score.","A critical zero-day vulnerability, CVE-2026-76460, has been discovered in Cisco's Identity Services Engine (ISE). This flaw allows for an authentication bypass through API endpoints, earning it a maximum CVSS score of 10. The vulnerability highlights ongoing challenges with securing API authentication mechanisms.","Cisco ISE zero-day CVE-2026-76460 allows authentication bypass via API endpoints.","https:\u002F\u002Fwww.darkreading.com\u002Fvulnerabilities-threats\u002Fcisco-zero-day-api-endpoint-authentication-issues","https:\u002F\u002Feu-images.contentstack.com\u002Fv3\u002Fassets\u002Fblt6d90778a997de1cd\u002Fblt9b9202e55102d483\u002F6aad857c8cb60c3268956114\u002Fapi-saifulasmee_chede-Getty-2203607940.jpg?width=720&quality=80&disable=upscale","2026-09-18T19:26:47+00:00","2026-09-18T20:00:30.276882+00:00",9,[17,20,23],{"name":18,"type":19},"Identity Services Engine (ISE)","product",{"name":21,"type":22},"Cisco","vendor",{"name":24,"type":25},"API","technology","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":26,"icon":28,"name":29,"slug":30},null,"Vulnerabilities","vulnerabilities",[32,37],{"category":33},{"id":34,"icon":28,"name":35,"slug":36},"574f766a-fb3f-487c-8d2c-0720ae75471b","Zero-day","zero-day",{"category":38},{"id":26,"icon":28,"name":29,"slug":30},[40],{"type":41,"value":42,"context":43},"cve","CVE-2026-76460","Cisco Identity Services Engine (ISE) authentication bypass vulnerability",[21,18],{"controls":46,"vendors":104},[47,76],{"slug":48,"name":49,"problem":50,"products":51},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[52,60,68],{"vendor_slug":53,"vendor_name":54,"vendor_logo":55,"product_slug":56,"product_name":57,"url":58,"description":59},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-vulnerability-management","Tenable Vulnerability Management","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fvulnerability-management","Cloud-based vulnerability scanning and prioritisation, built on Nessus.",{"vendor_slug":61,"vendor_name":62,"vendor_logo":63,"product_slug":64,"product_name":65,"url":66,"description":67},"holm-security","Holm Security","\u002Fvendor-logos\u002Fholm-security.png","holm-security-platform","Holm Security Platform","https:\u002F\u002Fwww.holmsecurity.com\u002F","Vulnerability scanning of systems, web applications, cloud and the external attack surface, plus phishing simulation.",{"vendor_slug":69,"vendor_name":70,"vendor_logo":71,"product_slug":72,"product_name":73,"url":74,"description":75},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"slug":77,"name":78,"problem":79,"products":80},"patch-management","Automated patch management","Known holes get closed in days, not months.",[81,88,96],{"vendor_slug":82,"vendor_name":83,"vendor_logo":84,"product_slug":77,"product_name":85,"url":86,"description":87},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","Qualys Patch Management","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fpatch-management\u002F","Patch deployment for operating systems and third-party applications, linked to vulnerability findings.",{"vendor_slug":89,"vendor_name":90,"vendor_logo":91,"product_slug":92,"product_name":93,"url":94,"description":95},"action1","Action1","\u002Fvendor-logos\u002Faction1.png","action1-patch-management","Action1 Patch Management","https:\u002F\u002Fwww.action1.com\u002F","Cloud-native patch management for Windows, macOS and third-party applications.",{"vendor_slug":97,"vendor_name":98,"vendor_logo":99,"product_slug":100,"product_name":101,"url":102,"description":103},"manageengine","ManageEngine","\u002Fvendor-logos\u002Fmanageengine.png","patch-manager-plus","ManageEngine Patch Manager Plus","https:\u002F\u002Fwww.manageengine.com\u002Fpatch-management\u002F","Patch management for operating systems and third-party applications, on premises or in the cloud.",[105],{"slug":106,"name":21,"logo_path":107,"roles":108},"cisco","\u002Fvendor-logos\u002Fcisco.png",[109],"affected",{"slug":111,"title":112,"body":113,"framework_refs":114,"framework_notes":126},"cisco-ise-zero-day-exposes-api-authentication-bypass-risks","Cisco ISE Zero-Day Exposes API Authentication Bypass Risks","A maximum-severity vulnerability (CVSS 10) in Cisco's Identity Services Engine reveals a fundamental failure in API endpoint authentication, allowing attackers to bypass identity controls entirely. This is particularly dangerous because ISE is itself a security and network access control platform — compromising it can grant attackers broad lateral movement across the enterprise. The flaw underscores a systemic industry challenge: APIs are frequently deployed without the same rigorous authentication scrutiny applied to traditional interfaces. When authentication controls are absent or bypassable at the API layer, all downstream access policies become ineffective. Organizations relying on ISE for zero-trust or NAC enforcement are especially exposed until patches are applied.",[115,116,117,118,119,120,121,122,123,124,125],"CIS Control 4: Secure Configuration of Enterprise Assets and Software","CIS Control 7: Continuous Vulnerability Management","CIS Control 12: Network Infrastructure Management","NIST SP 800-53 AC-3: Access Enforcement","NIST SP 800-53 AC-17: Remote Access","NIST SP 800-53 IA-3: Device Identification and Authentication","NIST SP 800-53 SI-2: Flaw Remediation","NIST CSF ID.RA-1: Asset vulnerabilities are identified and documented","OWASP API Security Top 10 - API2:2023 Broken Authentication","ISO\u002FIEC 27001 A.9.4: System and Application Access Control","GDPR Article 32: Security of Processing (where personal data flows through ISE)",{}]