⚡ Weekly Recap: Cisco 0-Day, AI Agent RCE, Click Fix Attacks, Click Fix Surge, and Browser Hijacks

Summary: Cisco warned of a maximum-severity authentication bypass in Identity Services Engine, tracked as CVE-2026-76460 with a CVSS score of 10.0, that is under active exploitation and stems from insufficient authentication control on an API endpoint. The week's roundup also lists dozens of other flaws across Orkes Conductor, Google Pixel, Parallels Desktop, the Linux kernel, Okta, Palo Alto Networks PAN-OS, Chrome, Firefox, Apple, SolarWinds and others, alongside ClickFix attacks and browser hijacks.
What you should know: A CVSS 10.0 flaw that lets an unauthenticated remote attacker into Cisco ISE - the system many organizations use to decide who and what gets on the network - is already being exploited, and it sits on a list long enough that triage, not patching capacity, becomes the binding constraint.

Read the original at The Hacker News ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2025-43936 CVE-2026-0310 CVE-2026-15315 CVE-2026-15316 CVE-2026-18851 CVE-2026-19666 CVE-2026-19667 CVE-2026-28304 CVE-2026-28305 CVE-2026-28306 CVE-2026-28307 CVE-2026-28308 CVE-2026-28309 CVE-2026-28310 CVE-2026-28311 CVE-2026-28312 CVE-2026-28313 CVE-2026-28314 CVE-2026-28316 CVE-2026-28317 CVE-2026-28323 CVE-2026-28326 CVE-2026-39919 CVE-2026-43502 CVE-2026-43790 CVE-2026-56711 CVE-2026-58138 CVE-2026-58704 CVE-2026-61410 CVE-2026-65346 CVE-2026-65400 CVE-2026-65414 CVE-2026-65638 CVE-2026-65812 CVE-2026-68121 CVE-2026-68488 CVE-2026-70416 CVE-2026-73178 CVE-2026-73324 CVE-2026-73693 CVE-2026-73694 CVE-2026-73698 CVE-2026-73699 CVE-2026-74469 CVE-2026-76163 CVE-2026-76460 CVE-2026-76669 CVE-2026-76670 CVE-2026-76672 CVE-2026-76673 CVE-2026-76674 CVE-2026-77147 CVE-2026-77179 CVE-2026-77692 CVE-2026-78623 CVE-2026-78626 CVE-2026-80172 CVE-2026-80238 CVE-2026-80274 CVE-2026-80844 CVE-2026-81000 CVE-2026-81642 CVE-2026-82079 CVE-2026-82232 CVE-2026-82717 CVE-2026-84607 CVE-2026-85061 CVE-2026-85982 CVE-2026-89049 CVE-2026-90894 CVE-2026-90999 CVE-2026-91721 CVE-2026-91726 CVE-2026-91749 CVE-2026-91843 CVE-2026-91931 CVE-2026-91932 CVE-2026-91998 CVE-2026-92005 CVE-2026-92013 CVE-2026-92015 CVE-2026-92020 CVE-2026-92022 CVE-2026-92029 CVE-2026-92033 CVE-2026-92034 CVE-2026-92038 CVE-2026-93372 CVE-2026-93374
Related: BIND 9 Update Fixes 14 Flaws, Including an Unauthenticated Crash Over DNS-over-HTTPS Cyber Risks ·
Solar Winds Patches ARM Hard-Coded Key Flaw Enabling Unauthenticated RCE Cyber Risks ·
CISA Flags Three Linux Kernel Vulnerabilities Exploited in the Wild Cyber Risks ·