Two Critical Cisco Vulnerabilities Put Network Access and Management Systems at Risk

Cisco disclosed two critical authentication bypass vulnerabilities in September 2026: CVE-2026-76460, affecting Identity Services Engine (ISE), and CVE-2026-76504, affecting Catalyst SD-WAN Manager. Cisco has confirmed active exploitation of both and released patches. MSPs and security teams should identify affected deployments, urgently apply the appropriate updates, and investigate whether attackers already gained access.