Required for the site to work (login, preferences, security). Always on.
Cisco ISE CVE-2026-76460 KEV overdue — MSP identity/NAC residual hunt
CVE-2026-76460 is in CISA KEV (dateAdded 2026-09-16 , due 2026-09-19 — overdue). KEV shortDescription: incorrect use of privileged APIs → unauthenticated remote attacker path.
CVE-2026-76460 is in CISA KEV (dateAdded 2026-09-16, due 2026-09-19 — overdue). KEV shortDescription: incorrect use of privileged APIs → unauthenticated remote attacker path. Primary advisory: cisco-sa-ISE-ABP-VNSW7Tn5.

KEV due 2026-09-19 missed: confirm ISE patch level, then attest residual
MSP identity and NAC estates running Cisco ISE: confirm the advisory patch level on every managed node, schedule emergency change windows where the due date was missed, then run a residual hunt and close with attestation evidence. Treat overdue KEV as an operational stop for exposed ISE management planes — inventory first, patch second, attest third.