← All news
ARTICLE
21 October 2026 Updated on 23 October 2026 1 min read

Cisco ISE CVE-2026-76460 KEV overdue — MSP identity/NAC residual hunt

CVE-2026-76460 is in CISA KEV (dateAdded 2026-09-16 , due 2026-09-19 — overdue). KEV shortDescription: incorrect use of privileged APIs → unauthenticated remote attacker path.

CVE-2026-76460 is in CISA KEV (dateAdded 2026-09-16, due 2026-09-19 — overdue). KEV shortDescription: incorrect use of privileged APIs → unauthenticated remote attacker path. Primary advisory: cisco-sa-ISE-ABP-VNSW7Tn5.

Cisco Catalyst switches in an equipment rack, wired with bundles of green, yellow, red and orange network cables
Photo: Jemimus (CC BY 2.0), Wikimedia Commons.

KEV due 2026-09-19 missed: confirm ISE patch level, then attest residual

MSP identity and NAC estates running Cisco ISE: confirm the advisory patch level on every managed node, schedule emergency change windows where the due date was missed, then run a residual hunt and close with attestation evidence. Treat overdue KEV as an operational stop for exposed ISE management planes — inventory first, patch second, attest third.