Our takeCSA Singapore reports active exploitation of a critical authentication-bypass vulnerability in Cisco Identity Services Engine and its Passive Identity Connector. Patch immediately if you run ISE.Cyber Resilience desk
What this means for you — Security leader:CSA Singapore reports active exploitation of a critical authentication-bypass vulnerability in Cisco ISE and ISE Passive Identity Connector. Patch all affected versions immediately.
What this means for you — Lean IT orgs:If you run Cisco Identity Services Engine or its Passive Identity Connector, update it right away — attackers are already using this flaw to get in without a password.
What this means for you — MSP:Check every client running Cisco ISE or Passive Identity Connector and confirm they are on a patched release; exploitation is confirmed active.
What this means for you — Researcher:CSA Singapore has listed this Cisco ISE authentication bypass as under active exploitation. The advisory is at https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-126/.