/
← Voltar ao feed
critical government

CISA adds Cisco ISE CVE-2026-76460 and Acronis Backup CVE-2026-87886 to KEV catalog over active exploitation

1 fonte(s) · 1 atualização(ões) · publicado 16/09/2026 09:00 · coletado há 4 dias

CISA added two vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog based on evidence of active exploitation: CVE-2026-76460, an incorrect use of privileged APIs flaw in Cisco Identity Services Engine, and CVE-2026-87886, an incorrect default permissions flaw in Acronis Backup. CISA describes these vulnerability types as a frequent attack vector for malicious cyber actors and a significant risk to the federal enterprise. The alert gives no exploitation details, threat actor attribution, victim information or IOCs. It restates the requirements of BOD 26-04 for Federal Civilian Executive Branch (FCEB) agencies, and CISA encourages all organizations to adopt risk-based vulnerability management and prioritize KEV remediation.

Detalhes técnicos

  • CVE-2026-76460: Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability.
  • CVE-2026-87886: Acronis Backup Incorrect Default Permissions Vulnerability.
  • The article does not list affected versions, exploitation methods, the impact of exploitation or whether the flaws are chained.

Remediação

  • Under BOD 26-04, FCEB agencies must prioritize rapid remediation of KEV-listed CVEs on publicly exposed assets that grant total control of the asset after exploitation.
  • BOD 26-04 also sets basic expectations for when agencies must check whether threat actors compromised a system before the patch was applied.
  • CISA encourages all organizations to prioritize remediation of KEV Catalog vulnerabilities.
  • The article gives no specific patch or mitigation guidance; consult the Cisco and Acronis vendor advisories.

Linha do tempo

  1. cisa.gov ↗ · pub. 16/09/2026 09:00 · coletado 19/10 18:37 primeiro registro

    CISA adds Cisco ISE CVE-2026-76460 and Acronis Backup CVE-2026-87886 to KEV catalog over active exploitation

    ler a análise desta fonte

    CISA added two vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog based on evidence of active exploitation: CVE-2026-76460, an incorrect use of privileged APIs flaw in Cisco Identity Services Engine, and CVE-2026-87886, an incorrect default permissions flaw in Acronis Backup. CISA describes these vulnerability types as a frequent attack vector for malicious cyber actors and a significant risk to the federal enterprise. The alert gives no exploitation details, threat actor attribution, victim information or IOCs. It restates the requirements of BOD 26-04 for Federal Civilian Executive Branch (FCEB) agencies, and CISA encourages all organizations to adopt risk-based vulnerability management and prioritize KEV remediation.

    Technical Details

    • CVE-2026-76460: Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability.
    • CVE-2026-87886: Acronis Backup Incorrect Default Permissions Vulnerability.
    • The article does not list affected versions, exploitation methods, the impact of exploitation or whether the flaws are chained.

    Remediation

    • Under BOD 26-04, FCEB agencies must prioritize rapid remediation of KEV-listed CVEs on publicly exposed assets that grant total control of the asset after exploitation.
    • BOD 26-04 also sets basic expectations for when agencies must check whether threat actors compromised a system before the patch was applied.
    • CISA encourages all organizations to prioritize remediation of KEV Catalog vulnerabilities.
    • The article gives no specific patch or mitigation guidance; consult the Cisco and Acronis vendor advisories.