// day
Sep 16, 2026
3 new incidents, 0 with updates.
## started
- highclosedpatchedclosed Sep 16, 2026
Cisco Identity Services Engine: Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability
› Cisco Identity Services Engine
Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) contain an incorrect use of privileged APIs vulnerability that could allow an unauthenticated, remote attacker to gain unauthorized access to the affected device by bypassing the web-based management interface. Added to CISA KEV on 2026-09-16.
CVE-2026-76460 - highclosedpatchedclosed Sep 16, 2026
Google Pixel: Google Pixel Improper Authorization Vulnerability
› Google Pixel
Google Pixel devices contain an improper authorization vulnerability in the cellular modem. A logic error may allow an attacker to bypass permission checks and escalate privileges. Added to CISA KEV on 2026-09-16.
CVE-2026-58704 - highclosedpatchedclosed Sep 16, 2026
Telegram Desktop one-click account takeover via tg:// IPC (CVE-2026-107181)
› Telegram Desktop
CVE-2026-107181 (CVSS 8.1) in Telegram Desktop before 7.2.9 lets a crafted tg:// link inject IPC commands and exfiltrate tdata session files, enabling account takeover without the password/2FA. Fixed in 7.2.9 (mid-September); continued discussion into early October.
CVE-2026-107181
