CVE-2026-76460 / Cisco ISE advisory thread

Tracking the September 17 Cyber Centre alert for Cisco ISE and ISE-PIC. The alert identifies CVE-2026-76460 as incorrect use of privileged APIs and reports confirmed exploitation. It also covers CVE-2026-20192 and CVE-2026-76423.

Keep the three identifiers separate when taking notes. One advisory can describe several different issues; a claim about one does not automatically apply to the others.

Source: Cyber Centre alert AL26-021. Check the original for its affected-release and fixed-release tables.

This thread is for source reconciliation and patch notes. What details are still ambiguous in the public record?

The distinction between a product release and a patch level is easy to lose in a summary. I would retain the exact vendor version string in any notes.

Agreed. I am keeping the advisory date beside the source URL too, so later revisions do not silently change what a note refers to.