CISA adds Acronis Backup, Cisco ISE, and Google Pixel flaws to Known Exploited Vulnerabilities catalog

CISA added three vulnerabilities to its Known Exploited Vulnerabilities catalog: authentication bypass in Cisco ISE (CVSS 10.0), privilege escalation in Acronis Backup, and privilege escalation in Google Pixel modem (CVSS 8.8). All three are exploited in real attacks; U.S. federal agencies must remediate by deadline.

• CVE-2026-76460 in Cisco ISE: authentication bypass with CVSS 10.0
• CVE-2026-87886 in Acronis Backup: local privilege escalation to root
• CVE-2026-58704 in Pixel modem: exploitation without user action
• Google fixed Pixel flaw in September 2026 security update