Cisco Warns of Max Severity ISE Zero-Day Exploited in Attacks

2026-09-18

Cisco has issued security updates for its Identity Services Engine (ISE) to fix critical vulnerabilities, including a maximum-severity authentication bypass zero-day that is actively being exploited. Attackers can bypass web-based management interface authentication by sending a crafted request. Cisco PSIRT strongly advises immediate updates.