CVE-2026-76460 is a critical security vulnerability in Cisco Identity Services Engine (ISE) caused by insufficient authentication control on a specific API endpoint. An unauthenticated remote attacker can exploit this by sending a crafted request to the vulnerable API, bypassing the web-based management interface authentication. Successful exploitation grants unauthorized access to the device, potentially allowing full control over the system.

Exploitation of this vulnerability allows an unauthenticated attacker to bypass authentication and gain unauthorized access to Cisco ISE devices. This can lead to complete compromise of the device, including confidentiality, integrity, and availability impacts as indicated by the CVSS score of 10. No known exploits are reported in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, organizations should monitor Cisco advisories closely for updates. Until a fix is available, restrict access to the affected API endpoints and limit network exposure of Cisco ISE management interfaces where possible.