ET EXPLOIT Cisco Identity Services Engine API Gateway Authentication Bypass (CVE-2026-76460)

7.0.3 5.0SID: 2072562Rev: 1Enabled4 views

Fileemerging-exploit.rules

CreatedOctober 23, 2026

UpdatedOctober 23, 2026

Classificationattempted-admin

alert http any any -> [$HOME_NET,$HTTP_SERVERS] any (msg:"ET EXPLOIT Cisco Identity Services Engine API Gateway Authentication Bypass (CVE-2026-76460)"; reference:url,github.com/advisories/GHSA-25wc-3w28-q6vw; reference:cve,2026-76460; classtype:attempted-admin; sid:2072562; rev:1; metadata:affected_product Cisco_ISE, attack_target Server, tls_state TLSDecrypt, created_at 2026_10_23, cve CVE_2026_76460, deployment Perimeter, deployment Internal, confidence High, signature_severity Major, updated_at 2026_10_23, mitre_tactic_id TA0001, mitre_tactic_name Initial_Access, mitre_technique_id T1190, mitre_technique_name Exploit_Public_Facing_Application;)

Detection details are hidden.

References

url	github.com/advisories/GHSA-25wc-3w28-q6vw
cve	2026-76460

Metadata

affected productCisco_ISE

attack targetServer

tls stateTLSDecrypt

created at2026_10_23

cve

CVE-2026-76460

deploymentInternal

confidenceHigh

signature severityMajor

updated at2026_10_23

mitre tactic idTA0001

mitre tactic nameInitial_Access

mitre technique idT1190

mitre technique nameExploit_Public_Facing_Application

Comments (0)

Please sign in to leave a comment.

No comments yet. Be the first to comment!