Cisco Patches 2nd Active Zero Day in 2 Days Via ISE Flaw

Cybersecurity28 days ago

CVE-2026-76460 allows remote attackers to bypass authentication and gain full control of affected devices via an API defect in Cisco Identity Services Engine. Cisco released a patch on Wednesday for the maximum-severity vulnerability, which had been actively exploited by attackers before the public disclosure.

The company disclosed this exploit just one day after announcing another actively exploited zero-day in a separate product. These back-to-back threats require customers to implement urgent security updates across unrelated areas of their network infrastructure to address the disparate flaws.

Saga

Citrix NetScaler zero-day exploitation response

Portfolio movement

Sep 25, 2026Today

+1.3%-1.6%

How we got here

Oct 8, 2026
New NetScaler CVE Hits Versions Admins Just Patched for Zero Days

All stories

Possible scenarios

45%Patch Containment Holds-0.1%
25%Broader Appliance Campaign-0.7%
20%Security Spending Boost+0.3%

Each figure is the modeled move of the S&P 500 if the outcome occurs. For information only. Not investment advice.

Looking for more context or analysis?

Tilt chat provides reliable, tailored insights, alerts, and automations.