⚡ Weekly Recap: Cisco 0-Day, AI Agent RCE, ClickFix Attacks, ClickFix Surge, and Browser Hijacks

🗓️ 21 Sep 2026 14:24:00Reported by The Hacker NewsType

thn🔗 thehackernews.com👁 19 Views

Security weekly recap: Cisco ISE auth bypass CVE-2026-76460 actively exploited, CVSS 10.0.

Reporter	Title	Published	Views	Family All 17
BDU FSTEC	The vulnerability in the application software interface of the Cisco Identity Services Engine (ISE) management platform allows a perpetrator to bypass existing security mechanisms and gain unauthorized access to protected information.	17 Sep 202600:00	–	bdu_fstec
Circl	CVE-2026-76460	16 Sep 202617:27	–	circl
CISA KEV Catalog	Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability	16 Sep 202600:00	–	cisa_kev
Cisco	Cisco Identity Services Engine Authentication Bypass Vulnerability	16 Sep 202616:00	–	cisco
Cisco	Cisco Advance Notification for Publication of September 16, 2026, Security Advisories	9 Sep 202616:00	–	cisco
Tenable Nessus	Cisco Identity Services Engine (cisco-sa-ISE-ABP-VNSW7Tn5)	18 Sep 202600:00	–	nessus
CVE	CVE-2026-76460	16 Sep 202620:12	–	cve
Cvelist	CVE-2026-76460 Cisco Identity Services Engine Authentication Bypass Vulnerability	16 Sep 202620:12	–	cvelist
EUVD	EUVD-2026-81122	16 Sep 202620:12	–	euvd
Kitploit	CVE-2026-76460	7 Oct 202615:31	–	kitploit

02 Oct 2026 11:15Current

7.9High risk

Vulners AI Score7.9

CVSS 3.110

EPSS0.14026

SSVC

Cisco ISE auth bypass API endpoint actively exploited CVSS 10.0