Cisco Warns of New Zero-Day ISE Auth Bypass (CVSS 10.0) Exploited in Active Attacks

Cisco has warned of a fresh maximum-severity security flaw impacting Identity Services Engine (ISE) that has come under active exploitation. The vulnerability, tracked as CVE-2026-76460 (CVSS score: 10.0), could allow an unauthenticated, remote attacker to bypass authentication. "This vulnerability is due to insufficient authentication control on an API endpoint," Cisco said. "An attacker

The article reports a Cisco advisory about a critical zero-day vulnerability (CVE-2026-76460, CVSS 10.0) in Identity Services Engine (ISE) that allows unauthenticated remote attackers to bypass authentication due to insufficient authentication control on an API endpoint; it is already being actively exploited. These are traditional IT security facts, focused on network access control infrastructure rather than any specific AI system. From a RealGround perspective, the practical implication is that compromised identity and access infrastructure can indirectly undermine the security of AI agents and AI services that rely on ISE for authentication and authorization, turning a supply-chain style dependency into an AI exposure point. Organizations should treat identity platforms as part of their AI supply chain and ensure they are patched promptly, monitored for abuse, and reflected in AI-related SBOM and dependency risk assessments.