Search
Find a vulnerability
Search criteria
3768 vulnerabilities by cisco
CERTFR-2026-AVI-1467
Vulnerability from certfr_avis - Published: 2026-11-05 - Updated: 2026-11-05
De multiples vulnérabilités ont été découvertes dans les produits Cisco. Elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un contournement de la politique de sécurité et un problème de sécurité non spécifié par l'éditeur.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Cisco | N/A | Business Process Automation (BPA) versions antérieures à 5.0, correctifs prévu pour novembre 2026 | ||
| Cisco | N/A | Catalyst Center (anciennement DNA Center) versions antérieures à 3.4.1, correctifs prévu pour juillet 2027 | ||
| Cisco | UCS | UCS Central Software versions antérieures à 2.1(2c) | ||
| Cisco | N/A | Private 5G versions antérieures à 22.23.4, date de publication des correctifs à déterminer | ||
| Cisco | N/A | Smart PHY, correctifs prévu pour mars 2027 | ||
| Cisco | N/A | Webex Connect versions antérieures à 6.22.2, correctifs prévu pour novembre 2026 | ||
| Cisco | N/A | AppDynamics SaaS | ||
| Cisco | N/A | Nexus 9000 Series Switches en standalone NX-OS (Guest Shell) | ||
| Cisco | N/A | CLI Analyzer | ||
| Cisco | N/A | Virtualized Infrastructure Manager | ||
| Cisco | N/A | Intersight, correctifs prévu pour novembre 2026 | ||
| Cisco | N/A | Business Process Automation (BPA) versions antérieures à 4.1.2, date de publication des correctifs à déterminer | ||
| Cisco | N/A | Secure Workload | ||
| Cisco | N/A | Intersight Virtual Appliance, correctifs prévu pour novembre 2026 | ||
| Cisco | N/A | Duo Network Gateway versions antérieures à 3.4.2 | ||
| Cisco | N/A | Security Cloud Control | ||
| Cisco | N/A | Secure Endpoint - Private Cloud Appliance, correctifs prévu pour novembre 2026 | ||
| Cisco | N/A | Duo Authentication Proxy Local Manager pour Windows versions antérieures à 6.8.1, correctifs prévu pour novembre 2026 | ||
| Cisco | N/A | Packet Tracer versions antérieures à 9.2.0, correctifs prévu pour décembre 2026 | ||
| Cisco | N/A | Spaces versions antérieures à 24.22.1 | ||
| Cisco | N/A | AI Canvas | ||
| Cisco | N/A | Business Process Automation (BPA) versions antérieures à 5.1, date de publication des correctifs à déterminer |
References
| Title | Publication Time | Tags | ||||||
|---|---|---|---|---|---|---|---|---|
|
||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Business Process Automation (BPA) versions ant\u00e9rieures \u00e0 5.0, correctifs pr\u00e9vu pour novembre 2026",
"product": {
"name": "N/A",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "Catalyst Center (anciennement DNA Center) versions ant\u00e9rieures \u00e0 3.4.1, correctifs pr\u00e9vu pour juillet 2027",
"product": {
"name": "N/A",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "UCS Central Software versions ant\u00e9rieures \u00e0 2.1(2c)",
"product": {
"name": "UCS",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "Private 5G versions ant\u00e9rieures \u00e0 22.23.4, date de publication des correctifs \u00e0 d\u00e9terminer",
"product": {
"name": "N/A",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "Smart PHY, correctifs pr\u00e9vu pour mars 2027",
"product": {
"name": "N/A",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "Webex Connect versions ant\u00e9rieures \u00e0 6.22.2, correctifs pr\u00e9vu pour novembre 2026",
"product": {
"name": "N/A",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "AppDynamics SaaS",
"product": {
"name": "N/A",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "Nexus 9000 Series Switches en standalone NX-OS (Guest Shell)",
"product": {
"name": "N/A",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "CLI Analyzer",
"product": {
"name": "N/A",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "Virtualized Infrastructure Manager",
"product": {
"name": "N/A",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "Intersight, correctifs pr\u00e9vu pour novembre 2026",
"product": {
"name": "N/A",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "Business Process Automation (BPA) versions ant\u00e9rieures \u00e0 4.1.2, date de publication des correctifs \u00e0 d\u00e9terminer",
"product": {
"name": "N/A",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "Secure Workload",
"product": {
"name": "N/A",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "Intersight Virtual Appliance, correctifs pr\u00e9vu pour novembre 2026",
"product": {
"name": "N/A",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "Duo Network Gateway versions ant\u00e9rieures \u00e0 3.4.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "Security Cloud Control",
"product": {
"name": "N/A",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "Secure Endpoint - Private Cloud Appliance, correctifs pr\u00e9vu pour novembre 2026",
"product": {
"name": "N/A",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "Duo Authentication Proxy Local Manager pour Windows versions ant\u00e9rieures \u00e0 6.8.1, correctifs pr\u00e9vu pour novembre 2026",
"product": {
"name": "N/A",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "Packet Tracer versions ant\u00e9rieures \u00e0 9.2.0, correctifs pr\u00e9vu pour d\u00e9cembre 2026",
"product": {
"name": "N/A",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "Spaces versions ant\u00e9rieures \u00e0 24.22.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "AI Canvas",
"product": {
"name": "N/A",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "Business Process Automation (BPA) versions ant\u00e9rieures \u00e0 5.1, date de publication des correctifs \u00e0 d\u00e9terminer",
"product": {
"name": "N/A",
"vendor": {
"name": "Cisco",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-105482",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-105482"
},
{
"name": "CVE-2026-105483",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-105483"
},
{
"name": "CVE-2026-106069",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-106069"
},
{
"name": "CVE-2026-76506",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-76506"
},
{
"name": "CVE-2026-111497",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-111497"
}
],
"initial_release_date": "2026-11-05T00:00:00",
"last_revision_date": "2026-11-05T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-1467",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-11-05T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Cisco. Elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, un contournement de la politique de s\u00e9curit\u00e9 et un probl\u00e8me de s\u00e9curit\u00e9 non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Cisco",
"vendor_advisories": [
{
"published_at": "2026-11-04",
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-cucs-rce-LzHSFRDQ",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucs-rce-LzHSFRDQ"
},
{
"published_at": "2026-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-oct2026-node-js-Jj3SQ19u",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-oct2026-node-js-Jj3SQ19u"
}
]
}
CERTFR-2026-AVI-1412
Vulnerability from certfr_avis - Published: 2026-10-29 - Updated: 2026-10-29
Une vulnérabilité a été découverte dans les produits Cisco. Elle permet à un attaquant de provoquer un déni de service à distance.
Cisco indique que la vulnérabilité CVE-2026-76418 est activement exploitée.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Cisco | Secure FTD Software | Secure FTD Software versions 7.4.x et antérieures à 7.4.9 | ||
| Cisco | Secure FTD Software | Secure FTD Software versions 7.0 et antérieures à 7.0.11 | ||
| Cisco | Secure Firewall Adaptive Security | Secure Firewall ASA Software versions 9.16 et antérieures à 9.16.4.104 | ||
| Cisco | Secure FTD Software | Secure FTD Software versions 10.0.x et antérieures à 10.0.3 | ||
| Cisco | Secure FTD Software | Secure FTD Software versions 7.6.x et antérieures à 7.6.7 | ||
| Cisco | Secure FTD Software | Secure FTD Software versions 7.7.x et antérieures à 7.7.14 | ||
| Cisco | Secure FTD Software | Secure FTD Software versions 10.1.x et antérieures à 10.1.1 | ||
| Cisco | Secure Firewall Adaptive Security | Secure Firewall ASA Software versions 9.18.x antérieures à 9.18.4.96 | ||
| Cisco | Secure Firewall Adaptive Security | Secure Firewall ASA Software versions 9.24.x antérieures à 9.24.1.279.24.10.1 | ||
| Cisco | Secure Firewall Adaptive Security | Secure Firewall ASA Software versions 9.23.x antérieures à 9.23.1.48 | ||
| Cisco | Secure FTD Software | Secure FTD Software versions 7.2.x et antérieures à 7.2.13 | ||
| Cisco | Secure Firewall Adaptive Security | Secure Firewall ASA Software versions 9.22.x antérieures à 9.22.3.200 | ||
| Cisco | Secure Firewall Adaptive Security | Secure Firewall ASA Software versions 9.20.x antérieures à 9.20.4.50 |
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Secure FTD Software versions 7.4.x et ant\u00e9rieures \u00e0 7.4.9",
"product": {
"name": "Secure FTD Software",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "Secure FTD Software versions 7.0 et ant\u00e9rieures \u00e0 7.0.11",
"product": {
"name": "Secure FTD Software",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "Secure Firewall ASA Software versions 9.16 et ant\u00e9rieures \u00e0 9.16.4.104",
"product": {
"name": "Secure Firewall Adaptive Security",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "Secure FTD Software versions 10.0.x et ant\u00e9rieures \u00e0 10.0.3",
"product": {
"name": "Secure FTD Software",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "Secure FTD Software versions 7.6.x et ant\u00e9rieures \u00e0 7.6.7",
"product": {
"name": "Secure FTD Software",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "Secure FTD Software versions 7.7.x et ant\u00e9rieures \u00e0 7.7.14",
"product": {
"name": "Secure FTD Software",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "Secure FTD Software versions 10.1.x et ant\u00e9rieures \u00e0 10.1.1",
"product": {
"name": "Secure FTD Software",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "Secure Firewall ASA Software versions 9.18.x ant\u00e9rieures \u00e0 9.18.4.96",
"product": {
"name": "Secure Firewall Adaptive Security",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "Secure Firewall ASA Software versions 9.24.x ant\u00e9rieures \u00e0 9.24.1.279.24.10.1",
"product": {
"name": "Secure Firewall Adaptive Security",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "Secure Firewall ASA Software versions 9.23.x ant\u00e9rieures \u00e0 9.23.1.48",
"product": {
"name": "Secure Firewall Adaptive Security",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "Secure FTD Software versions 7.2.x et ant\u00e9rieures \u00e0 7.2.13",
"product": {
"name": "Secure FTD Software",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "Secure Firewall ASA Software versions 9.22.x ant\u00e9rieures \u00e0 9.22.3.200",
"product": {
"name": "Secure Firewall Adaptive Security",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "Secure Firewall ASA Software versions 9.20.x ant\u00e9rieures \u00e0 9.20.4.50",
"product": {
"name": "Secure Firewall Adaptive Security",
"vendor": {
"name": "Cisco",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-76418",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-76418"
}
],
"initial_release_date": "2026-10-29T00:00:00",
"last_revision_date": "2026-10-29T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-1412",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-10-29T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
}
],
"summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans les produits Cisco. Elle permet \u00e0 un attaquant de provoquer un d\u00e9ni de service \u00e0 distance.\n\nCisco indique que la vuln\u00e9rabilit\u00e9 CVE-2026-76418 est activement exploit\u00e9e.",
"title": "Vuln\u00e9rabilit\u00e9 dans les produits Cisco",
"vendor_advisories": [
{
"published_at": "2026-10-28",
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-asaftd-tunnel-dos-s6mgkb75",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-tunnel-dos-s6mgkb75"
}
]
}
CERTFR-2026-AVI-1360
Vulnerability from certfr_avis - Published: 2026-10-22 - Updated: 2026-10-22
De multiples vulnérabilités ont été découvertes dans les produits Cisco. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Cisco | IOS XE | IOS XE Software versions 26.2.x et antérieures à 26.2.1 | ||
| Cisco | Open Source Snort | Snort 3 versions 3.x antérieures à 3.12.4.0 | ||
| Cisco | IOS XR | IOS XR Software versions 24.1 et antérieures à 24.1.2 and SMU asr9k-x64-24.1.2.CSCwn39554 | ||
| Cisco | IOS XR | IOS XR Software versions 24.4.x et antérieures à 24.4.2 | ||
| Cisco | Secure FTD Software | Secure FTD Software versions 7.2.x et antérieures à 7.2.12 | ||
| Cisco | N/A | Emergency Responder, Prime Collaboration Deployment, Unified CM, Unified CM IM&P, Unified CM SME, and Unity Connection versions postérieures à 14 et antérieures à 15SU5 | ||
| Cisco | IOS XE | IOS XE Software versions 17.18.x et antérieures à 17.18.5 | ||
| Cisco | Expressway Series | Expressway Series versions postérieures à X14 et antérieures à X15.5.20 | ||
| Cisco | IOS XE | IOS XE Software versions 17.15.x et antérieures à 17.15.6 | ||
| Cisco | IOS XE | IOS XE Software versions 26.1.x et antérieures à 26.1.2 | ||
| Cisco | IOS XR | IOS XR Software versions 7.9 et antérieures à à 7.9.2 and SMU asr9k-x64-7.9.2.CSCwn39554 et 7.9.21 and SMU asr9k-x64-7.9.21.CSCwn39554 | ||
| Cisco | IOS XR | IOS XR Software versions 7.11 et antérieures à 7.11.21 and SMU asr9k-x64-7.11.21.CSCwn39554 et 7.11.21 and SMU asr9k-x64-7.11.21.CSCwn39554 | ||
| Cisco | Secure FTD Software | Secure FTD Software versions 10.0.x et antérieures à 10.0.2 | ||
| Cisco | Cyber Vision | Cyber Vision versions antérieures à 5.6.0 | ||
| Cisco | Secure FTD Software | Secure FTD Software versions 7.6.x et antérieures à 7.6.6 | ||
| Cisco | IOS XR | IOS XR Software versions 24.3 et antérieures à 24.3.2 and SMU asr9k-x64-24.3.2.CSCwn39554 | ||
| Cisco | Secure FTD Software | Secure FTD Software versions 7.4.x et antérieures à 7.4.8 | ||
| Cisco | Secure Client | Secure Client versions postérieures à 5.1.20.333 et antérieures à 5.1.20.333 | ||
| Cisco | Secure FTD Software | Secure FTD Software versions 10.1.x et antérieures à 10.1.0 | ||
| Cisco | Secure FTD Software | Secure FTD Software versions 7.7.x et antérieures à 7.7.13 | ||
| Cisco | IOS XR | IOS XR Software versions 7.10 et antérieures à 7.10.2 and SMU asr9k-x64-7.10.2.CSCwn39554 | ||
| Cisco | Secure FTD Software | Secure FTD Software versions 7.0.x et antérieures à 7.0.10 | ||
| Cisco | IOS XE | IOS XE Software versions 17.12.x et antérieures à 17.12.8 | ||
| Cisco | IOS XR | IOS XR Software versions 24.2 et antérieures à 24.2.2 and SMU asr9k-x64-24.2.2.CSCwn3955424.2.21 |
References
| Title | Publication Time | Tags | ||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "IOS XE Software versions 26.2.x et ant\u00e9rieures \u00e0 26.2.1",
"product": {
"name": "IOS XE",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "Snort 3 versions 3.x ant\u00e9rieures \u00e0 3.12.4.0",
"product": {
"name": "Open Source Snort",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "IOS XR Software versions 24.1 et ant\u00e9rieures \u00e0 24.1.2 and SMU asr9k-x64-24.1.2.CSCwn39554",
"product": {
"name": "IOS XR",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "IOS XR Software versions 24.4.x et ant\u00e9rieures \u00e0 24.4.2",
"product": {
"name": "IOS XR",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "Secure FTD Software versions 7.2.x et ant\u00e9rieures \u00e0 7.2.12",
"product": {
"name": "Secure FTD Software",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "Emergency Responder, Prime Collaboration Deployment, Unified CM, Unified CM IM\u0026P, Unified CM SME, and Unity Connection versions post\u00e9rieures \u00e0 14 et ant\u00e9rieures \u00e0 15SU5",
"product": {
"name": "N/A",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "IOS XE Software versions 17.18.x et ant\u00e9rieures \u00e0 17.18.5",
"product": {
"name": "IOS XE",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "Expressway Series versions post\u00e9rieures \u00e0 X14 et ant\u00e9rieures \u00e0 X15.5.20",
"product": {
"name": "Expressway Series",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "IOS XE Software versions 17.15.x et ant\u00e9rieures \u00e0 17.15.6",
"product": {
"name": "IOS XE",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "IOS XE Software versions 26.1.x et ant\u00e9rieures \u00e0 26.1.2",
"product": {
"name": "IOS XE",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "IOS XR Software versions 7.9 et ant\u00e9rieures \u00e0 \u00e0 7.9.2 and SMU asr9k-x64-7.9.2.CSCwn39554 et 7.9.21 and SMU asr9k-x64-7.9.21.CSCwn39554",
"product": {
"name": "IOS XR",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "IOS XR Software versions 7.11 et ant\u00e9rieures \u00e0 7.11.21 and SMU asr9k-x64-7.11.21.CSCwn39554 et 7.11.21 and SMU asr9k-x64-7.11.21.CSCwn39554",
"product": {
"name": "IOS XR",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "Secure FTD Software versions 10.0.x et ant\u00e9rieures \u00e0 10.0.2",
"product": {
"name": "Secure FTD Software",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "Cyber Vision versions ant\u00e9rieures \u00e0 5.6.0",
"product": {
"name": "Cyber Vision",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "Secure FTD Software versions 7.6.x et ant\u00e9rieures \u00e0 7.6.6",
"product": {
"name": "Secure FTD Software",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "IOS XR Software versions 24.3 et ant\u00e9rieures \u00e0 24.3.2 and SMU asr9k-x64-24.3.2.CSCwn39554",
"product": {
"name": "IOS XR",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "Secure FTD Software versions 7.4.x et ant\u00e9rieures \u00e0 7.4.8",
"product": {
"name": "Secure FTD Software",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "Secure Client versions post\u00e9rieures \u00e0 5.1.20.333 et ant\u00e9rieures \u00e0 5.1.20.333",
"product": {
"name": "Secure Client",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "Secure FTD Software versions 10.1.x et ant\u00e9rieures \u00e0 10.1.0",
"product": {
"name": "Secure FTD Software",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "Secure FTD Software versions 7.7.x et ant\u00e9rieures \u00e0 7.7.13",
"product": {
"name": "Secure FTD Software",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "IOS XR Software versions 7.10 et ant\u00e9rieures \u00e0 7.10.2 and SMU asr9k-x64-7.10.2.CSCwn39554",
"product": {
"name": "IOS XR",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "Secure FTD Software versions 7.0.x et ant\u00e9rieures \u00e0 7.0.10",
"product": {
"name": "Secure FTD Software",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "IOS XE Software versions 17.12.x et ant\u00e9rieures \u00e0 17.12.8",
"product": {
"name": "IOS XE",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "IOS XR Software versions 24.2 et ant\u00e9rieures \u00e0 24.2.2 and SMU asr9k-x64-24.2.2.CSCwn3955424.2.21",
"product": {
"name": "IOS XR",
"vendor": {
"name": "Cisco",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-20356",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-20356"
},
{
"name": "CVE-2026-76481",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-76481"
},
{
"name": "CVE-2026-76524",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-76524"
},
{
"name": "CVE-2026-76494",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-76494"
},
{
"name": "CVE-2026-109619",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109619"
},
{
"name": "CVE-2026-109618",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-109618"
},
{
"name": "CVE-2026-76462",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-76462"
},
{
"name": "CVE-2026-76475",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-76475"
},
{
"name": "CVE-2026-76477",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-76477"
},
{
"name": "CVE-2026-76490",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-76490"
},
{
"name": "CVE-2026-76473",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-76473"
},
{
"name": "CVE-2026-76491",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-76491"
},
{
"name": "CVE-2026-76492",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-76492"
},
{
"name": "CVE-2026-76493",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-76493"
},
{
"name": "CVE-2026-76495",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-76495"
},
{
"name": "CVE-2026-20043",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-20043"
},
{
"name": "CVE-2026-76474",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-76474"
},
{
"name": "CVE-2026-76466",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-76466"
},
{
"name": "CVE-2026-76505",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-76505"
},
{
"name": "CVE-2026-76497",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-76497"
},
{
"name": "CVE-2026-76476",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-76476"
},
{
"name": "CVE-2026-20236",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-20236"
},
{
"name": "CVE-2026-20291",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-20291"
},
{
"name": "CVE-2026-76478",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-76478"
},
{
"name": "CVE-2026-76479",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-76479"
},
{
"name": "CVE-2026-76496",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-76496"
}
],
"initial_release_date": "2026-10-22T00:00:00",
"last_revision_date": "2026-10-22T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-1360",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-10-22T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Cisco. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et un d\u00e9ni de service \u00e0 distance.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Cisco",
"vendor_advisories": [
{
"published_at": "2026-10-21",
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-exwy-hardening-FhcqBVcs",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-exwy-hardening-FhcqBVcs"
},
{
"published_at": "2026-10-21",
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-sec-client-priv-esc-muF8eZdm",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sec-client-priv-esc-muF8eZdm"
},
{
"published_at": "2026-10-21",
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-vcs-static-cred-hr7EWZ8t",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vcs-static-cred-hr7EWZ8t"
},
{
"published_at": "2026-10-21",
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-voice-hardening-twgbH9e3",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-voice-hardening-twgbH9e3"
},
{
"published_at": "2026-10-21",
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-asr9k-tUyxcyXN",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asr9k-tUyxcyXN"
},
{
"published_at": "2026-10-21",
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-hardening-snort3-ybgmhTQe",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-snort3-ybgmhTQe"
},
{
"published_at": "2026-10-21",
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-opensrc-snort3-2fXGJPfe",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-opensrc-snort3-2fXGJPfe"
},
{
"published_at": "2026-10-22",
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-php-october26-Jj384Daq",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-php-october26-Jj384Daq"
}
]
}
CVE-2026-20241 (GCVE-0-2026-20241)
Vulnerability from cvelistv5 – Published: 2026-11-04 16:27 – Updated: 2026-11-04 18:17
VLAI
EPSS
VEX
Title
Cisco Identity Services Engine Authorization Bypass Vulnerability
Summary
A vulnerability in the authorization mechanism of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an unauthenticated, remote attacker to obtain an endpoint identity certificate.
This vulnerability is due to improper authorization checks. An attacker could exploit this vulnerability by sending a crafted request to an affected device. A successful exploit could allow the attacker to bypass authorization to obtain an endpoint certificate.
Severity
5.3 (Medium)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-11-04 18:17 UTC
CWE
- CWE-285 - Improper Authorization
Assigner
cisco
CNA
References
1 reference
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Cisco | Cisco Identity Services Engine Software |
Affected:
3.1.0
Affected: 3.1.0 p1 Affected: 3.1.0 p3 Affected: 3.1.0 p2 Affected: 3.2.0 Affected: 3.1.0 p4 Affected: 3.1.0 p5 Affected: 3.2.0 p1 Affected: 3.1.0 p6 Affected: 3.2.0 p2 Affected: 3.1.0 p7 Affected: 3.3.0 Affected: 3.2.0 p3 Affected: 3.2.0 p4 Affected: 3.1.0 p8 Affected: 3.2.0 p5 Affected: 3.2.0 p6 Affected: 3.1.0 p9 Affected: 3.3 Patch 2 Affected: 3.3 Patch 1 Affected: 3.3 Patch 3 Affected: 3.4.0 Affected: 3.2.0 p7 Affected: 3.3 Patch 4 Affected: 3.4 Patch 1 Affected: 3.1.0 p10 Affected: 3.3 Patch 5 Affected: 3.3 Patch 6 Affected: 3.4 Patch 2 Affected: 3.3 Patch 7 Affected: 3.4 Patch 3 Affected: 3.5.0 Affected: 3.4 Patch 4 Affected: 3.3 Patch 8 Affected: 3.2 Patch 8 Affected: 3.5 Patch 1 Affected: 3.3 Patch 9 Affected: 3.2 Patch 9 Affected: 3.4 Patch 5 Affected: 3.5 Patch 3 Affected: 3.5 Patch 2 Affected: 3.3 Patch 10 Affected: 3.3 Patch 11 Affected: 3.4 Patch 6 Affected: 3.2 Patch 10 Affected: 3.1.0 p11 |
|
| Cisco | Cisco ISE Passive Identity Connector |
Affected:
3.2.0
Affected: 3.1.0 Affected: 3.3.0 Affected: 3.4.0 Affected: 3.5.0 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-20241",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-11-04T18:17:26.586769Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-11-04T18:17:35.484Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Cisco Identity Services Engine Software",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "3.1.0"
},
{
"status": "affected",
"version": "3.1.0 p1"
},
{
"status": "affected",
"version": "3.1.0 p3"
},
{
"status": "affected",
"version": "3.1.0 p2"
},
{
"status": "affected",
"version": "3.2.0"
},
{
"status": "affected",
"version": "3.1.0 p4"
},
{
"status": "affected",
"version": "3.1.0 p5"
},
{
"status": "affected",
"version": "3.2.0 p1"
},
{
"status": "affected",
"version": "3.1.0 p6"
},
{
"status": "affected",
"version": "3.2.0 p2"
},
{
"status": "affected",
"version": "3.1.0 p7"
},
{
"status": "affected",
"version": "3.3.0"
},
{
"status": "affected",
"version": "3.2.0 p3"
},
{
"status": "affected",
"version": "3.2.0 p4"
},
{
"status": "affected",
"version": "3.1.0 p8"
},
{
"status": "affected",
"version": "3.2.0 p5"
},
{
"status": "affected",
"version": "3.2.0 p6"
},
{
"status": "affected",
"version": "3.1.0 p9"
},
{
"status": "affected",
"version": "3.3 Patch 2"
},
{
"status": "affected",
"version": "3.3 Patch 1"
},
{
"status": "affected",
"version": "3.3 Patch 3"
},
{
"status": "affected",
"version": "3.4.0"
},
{
"status": "affected",
"version": "3.2.0 p7"
},
{
"status": "affected",
"version": "3.3 Patch 4"
},
{
"status": "affected",
"version": "3.4 Patch 1"
},
{
"status": "affected",
"version": "3.1.0 p10"
},
{
"status": "affected",
"version": "3.3 Patch 5"
},
{
"status": "affected",
"version": "3.3 Patch 6"
},
{
"status": "affected",
"version": "3.4 Patch 2"
},
{
"status": "affected",
"version": "3.3 Patch 7"
},
{
"status": "affected",
"version": "3.4 Patch 3"
},
{
"status": "affected",
"version": "3.5.0"
},
{
"status": "affected",
"version": "3.4 Patch 4"
},
{
"status": "affected",
"version": "3.3 Patch 8"
},
{
"status": "affected",
"version": "3.2 Patch 8"
},
{
"status": "affected",
"version": "3.5 Patch 1"
},
{
"status": "affected",
"version": "3.3 Patch 9"
},
{
"status": "affected",
"version": "3.2 Patch 9"
},
{
"status": "affected",
"version": "3.4 Patch 5"
},
{
"status": "affected",
"version": "3.5 Patch 3"
},
{
"status": "affected",
"version": "3.5 Patch 2"
},
{
"status": "affected",
"version": "3.3 Patch 10"
},
{
"status": "affected",
"version": "3.3 Patch 11"
},
{
"status": "affected",
"version": "3.4 Patch 6"
},
{
"status": "affected",
"version": "3.2 Patch 10"
},
{
"status": "affected",
"version": "3.1.0 p11"
}
]
},
{
"defaultStatus": "unknown",
"product": "Cisco ISE Passive Identity Connector",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "3.2.0"
},
{
"status": "affected",
"version": "3.1.0"
},
{
"status": "affected",
"version": "3.3.0"
},
{
"status": "affected",
"version": "3.4.0"
},
{
"status": "affected",
"version": "3.5.0"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the authorization mechanism of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an unauthenticated, remote attacker to obtain an endpoint identity certificate.\r\n\r\nThis vulnerability is due to improper authorization checks. An attacker could exploit this vulnerability by sending a crafted request to an affected device. A successful exploit could allow the attacker to bypass authorization to obtain an endpoint certificate."
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-285",
"description": "Improper Authorization",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-04T16:27:03.473Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-ise-cert-mE9BD5GO",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-cert-mE9BD5GO"
}
],
"source": {
"advisory": "cisco-sa-ise-cert-mE9BD5GO",
"defects": [
"CSCwu26099"
],
"discovery": "INTERNAL"
},
"title": "Cisco Identity Services Engine Authorization Bypass Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2026-20241",
"datePublished": "2026-11-04T16:27:03.473Z",
"dateReserved": "2025-10-08T11:59:15.400Z",
"dateUpdated": "2026-11-04T18:17:35.484Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-76419 (GCVE-0-2026-76419)
Vulnerability from cvelistv5 – Published: 2026-11-04 16:27 – Updated: 2026-11-04 18:16
VLAI
EPSS
VEX
Title
Cisco Unified Communications Manager Cross-Site Scripting Vulnerability
Summary
A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface.
This vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.
Severity
6.1 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-11-04 18:16 UTC
CWE
- CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Assigner
cisco
CNA
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Cisco | Cisco Unified Communications Manager |
Affected:
14
Affected: 14SU1 Affected: 14SU2 Affected: 14SU3 Affected: 15 Affected: 15SU1 Affected: 14SU4 Affected: 14SU4a Affected: 15SU1a Affected: 15SU2 Affected: 15.0.1.13010-1 Affected: 15.0.1.13011-1 Affected: 15.0.1.13012-1 Affected: 15.0.1.13013-1 Affected: 15.0.1.13014-1 Affected: 15.0.1.13015-1 Affected: 15.0.1.13016-1 Affected: 15.0.1.13017-1 Affected: 15SU3a Affected: 14SU5 Affected: 15SU4 Affected: 15SU4a Affected: 14SU6 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-76419",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-11-04T18:16:28.347300Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-11-04T18:16:39.075Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Cisco Unified Communications Manager",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "14"
},
{
"status": "affected",
"version": "14SU1"
},
{
"status": "affected",
"version": "14SU2"
},
{
"status": "affected",
"version": "14SU3"
},
{
"status": "affected",
"version": "15"
},
{
"status": "affected",
"version": "15SU1"
},
{
"status": "affected",
"version": "14SU4"
},
{
"status": "affected",
"version": "14SU4a"
},
{
"status": "affected",
"version": "15SU1a"
},
{
"status": "affected",
"version": "15SU2"
},
{
"status": "affected",
"version": "15.0.1.13010-1"
},
{
"status": "affected",
"version": "15.0.1.13011-1"
},
{
"status": "affected",
"version": "15.0.1.13012-1"
},
{
"status": "affected",
"version": "15.0.1.13013-1"
},
{
"status": "affected",
"version": "15.0.1.13014-1"
},
{
"status": "affected",
"version": "15.0.1.13015-1"
},
{
"status": "affected",
"version": "15.0.1.13016-1"
},
{
"status": "affected",
"version": "15.0.1.13017-1"
},
{
"status": "affected",
"version": "15SU3a"
},
{
"status": "affected",
"version": "14SU5"
},
{
"status": "affected",
"version": "15SU4"
},
{
"status": "affected",
"version": "15SU4a"
},
{
"status": "affected",
"version": "14SU6"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface.\r\n\r\nThis vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information."
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-79",
"description": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-04T16:27:03.471Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-cucm-xss-5mQn2U5z",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-xss-5mQn2U5z"
}
],
"source": {
"advisory": "cisco-sa-cucm-xss-5mQn2U5z",
"defects": [
"CSCwv01048"
],
"discovery": "INTERNAL"
},
"title": "Cisco Unified Communications Manager Cross-Site Scripting Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2026-76419",
"datePublished": "2026-11-04T16:27:03.471Z",
"dateReserved": "2026-08-19T12:02:03.633Z",
"dateUpdated": "2026-11-04T18:16:39.075Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-76506 (GCVE-0-2026-76506)
Vulnerability from cvelistv5 – Published: 2026-11-04 16:27 – Updated: 2026-11-05 04:56
VLAI
EPSS
VEX
Title
Cisco Unified Computing System Central Remote Code Execution Vulnerability
Summary
A vulnerability in the web-based management interface of Cisco UCS Central Software could allow an authenticated, remote attacker to achieve remote code execution or conduct information disclosure attacks on an affected device.
This vulnerability is due to insufficient validation of user-supplied input in an HTTP request. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected endpoint on an affected device. A successful exploit could allow the attacker to execute arbitrary commands, write arbitrary files to the filesystem, and obtain sensitive information. To exploit this vulnerability, the attacker must have valid user credentials on the affected device.
Cisco has released software updates that address this vulnerability There are no workarounds that address this vulnerability.
Severity
7.6 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-11-04 00:00 UTC
CWE
- CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Assigner
cisco
CNA
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Cisco | Cisco Unified Computing System Central Software |
Affected:
2.0(1e)
Affected: 2.0(1a) Affected: 2.0(1h) Affected: 2.0(1g) Affected: 2.0(1c) Affected: 2.0(1k) Affected: 2.0(1l) Affected: 2.0(1f) Affected: 2.0(1j) Affected: 2.0(1b) Affected: 2.0(1i) Affected: 2.0(1d) Affected: 2.0(1m) Affected: 2.0(1n) Affected: 2.0(1o) Affected: 2.0(1p) Affected: 2.0(1q) Affected: 2.0(1r) Affected: 2.0(1s) Affected: 2.0(1t) Affected: 2.0(1u) Affected: 2.0(1v) Affected: 2.0(1w) Affected: 2.1(1a) Affected: 2.1(1b) Affected: 2.1(1c) Affected: 2.1(2a) Affected: 2.1(2b) |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-76506",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-11-04T00:00:00+00:00",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-11-05T04:56:47.292Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Cisco Unified Computing System Central Software",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "2.0(1e)"
},
{
"status": "affected",
"version": "2.0(1a)"
},
{
"status": "affected",
"version": "2.0(1h)"
},
{
"status": "affected",
"version": "2.0(1g)"
},
{
"status": "affected",
"version": "2.0(1c)"
},
{
"status": "affected",
"version": "2.0(1k)"
},
{
"status": "affected",
"version": "2.0(1l)"
},
{
"status": "affected",
"version": "2.0(1f)"
},
{
"status": "affected",
"version": "2.0(1j)"
},
{
"status": "affected",
"version": "2.0(1b)"
},
{
"status": "affected",
"version": "2.0(1i)"
},
{
"status": "affected",
"version": "2.0(1d)"
},
{
"status": "affected",
"version": "2.0(1m)"
},
{
"status": "affected",
"version": "2.0(1n)"
},
{
"status": "affected",
"version": "2.0(1o)"
},
{
"status": "affected",
"version": "2.0(1p)"
},
{
"status": "affected",
"version": "2.0(1q)"
},
{
"status": "affected",
"version": "2.0(1r)"
},
{
"status": "affected",
"version": "2.0(1s)"
},
{
"status": "affected",
"version": "2.0(1t)"
},
{
"status": "affected",
"version": "2.0(1u)"
},
{
"status": "affected",
"version": "2.0(1v)"
},
{
"status": "affected",
"version": "2.0(1w)"
},
{
"status": "affected",
"version": "2.1(1a)"
},
{
"status": "affected",
"version": "2.1(1b)"
},
{
"status": "affected",
"version": "2.1(1c)"
},
{
"status": "affected",
"version": "2.1(2a)"
},
{
"status": "affected",
"version": "2.1(2b)"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the web-based management interface of Cisco UCS Central Software could allow an authenticated, remote attacker to achieve remote code execution or conduct information disclosure attacks on an affected device.\r\n\r\nThis vulnerability is due to insufficient validation of user-supplied input in an HTTP request. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected endpoint on an affected device. A successful exploit could allow the attacker to execute arbitrary commands, write arbitrary files to the filesystem, and obtain sensitive information. To exploit this vulnerability, the attacker must have valid user credentials on the affected device.\r\nCisco has released software updates that address this vulnerability There are no workarounds that address this vulnerability."
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-22",
"description": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-04T16:27:03.469Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-cucs-rce-LzHSFRDQ",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucs-rce-LzHSFRDQ"
}
],
"source": {
"advisory": "cisco-sa-cucs-rce-LzHSFRDQ",
"defects": [
"CSCwv60193"
],
"discovery": "EXTERNAL"
},
"title": "Cisco Unified Computing System Central Remote Code Execution Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2026-76506",
"datePublished": "2026-11-04T16:27:03.469Z",
"dateReserved": "2026-08-19T12:02:03.641Z",
"dateUpdated": "2026-11-05T04:56:47.292Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-76418 (GCVE-0-2026-76418)
Vulnerability from cvelistv5 – Published: 2026-10-28 20:05 – Updated: 2026-10-30 03:55
VLAI
EPSS
VEX
Title
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service Vulnerability
Summary
A vulnerability in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due to logic errors when secondary authentication is configured on a tunnel group. An attacker could exploit this vulnerability by sending a crafted request when connecting to the SSL remote access VPN. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition.
Severity
8.6 (High)
SSVC
Exploitation: active
Automatable: yes
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-28 00:00 UTC
CWE
- CWE-690 - Unchecked Return Value to NULL Pointer Dereference
Assigner
cisco
CNA
References
2 references
| URL | Tags |
|---|---|
| https://sec.cloudapps.cisco.com/security/center/c… | |
| https://www.cisa.gov/known-exploited-vulnerabilit… | government-resource |
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software |
Affected:
9.16.1
Affected: 9.16.1.28 Affected: 9.16.2 Affected: 9.16.2.3 Affected: 9.16.2.7 Affected: 9.16.2.11 Affected: 9.16.2.13 Affected: 9.16.2.14 Affected: 9.16.3.3 Affected: 9.16.3 Affected: 9.16.3.14 Affected: 9.18.1 Affected: 9.16.3.15 Affected: 9.18.1.3 Affected: 9.18.2 Affected: 9.16.3.19 Affected: 9.16.3.23 Affected: 9.18.2.5 Affected: 9.16.4 Affected: 9.18.2.7 Affected: 9.19.1 Affected: 9.16.4.9 Affected: 9.18.2.8 Affected: 9.16.4.14 Affected: 9.18.3 Affected: 9.19.1.5 Affected: 9.16.4.18 Affected: 9.19.1.9 Affected: 9.18.3.39 Affected: 9.16.4.19 Affected: 9.19.1.12 Affected: 9.18.3.46 Affected: 9.16.4.27 Affected: 9.19.1.18 Affected: 9.18.3.53 Affected: 9.18.3.55 Affected: 9.16.4.38 Affected: 9.16.4.39 Affected: 9.18.3.56 Affected: 9.20.1 Affected: 9.16.4.42 Affected: 9.19.1.22 Affected: 9.18.4 Affected: 9.20.1.5 Affected: 9.18.4.5 Affected: 9.19.1.24 Affected: 9.16.4.48 Affected: 9.18.4.8 Affected: 9.20.2 Affected: 9.19.1.27 Affected: 9.16.4.55 Affected: 9.18.4.22 Affected: 9.20.2.10 Affected: 9.16.4.57 Affected: 9.19.1.28 Affected: 9.18.4.24 Affected: 9.20.2.21 Affected: 9.16.4.61 Affected: 9.19.1.31 Affected: 9.18.4.29 Affected: 9.20.2.22 Affected: 9.16.4.62 Affected: 9.18.4.34 Affected: 9.20.3 Affected: 9.16.4.67 Affected: 9.16.4.70 Affected: 9.18.4.40 Affected: 9.23.1 Affected: 9.22.1.1 Affected: 9.16.4.71 Affected: 9.20.3.4 Affected: 9.18.4.47 Affected: 9.20.3.7 Affected: 9.19.1.37 Affected: 9.16.4.76 Affected: 9.20.3.9 Affected: 9.19.1.38 Affected: 9.18.4.50 Affected: 9.22.1.3 Affected: 9.20.3.10 Affected: 9.22.1.2 Affected: 9.18.4.52 Affected: 9.20.3.13 Affected: 9.22.1.6 Affected: 9.18.4.53 Affected: 9.16.4.82 Affected: 9.22.2 Affected: 9.20.3.16 Affected: 9.19.1.42 Affected: 9.18.4.57 Affected: 9.16.4.84 Affected: 9.23.1.3 Affected: 9.20.3.20 Affected: 9.22.2.4 Affected: 9.23.1.7 Affected: 9.20.4 Affected: 9.22.2.9 Affected: 9.23.1.13 Affected: 9.20.4.7 Affected: 9.22.2.13 Affected: 9.18.4.66 Affected: 9.20.4.10 Affected: 9.23.1.19 Affected: 9.16.4.85 Affected: 9.22.2.14 Affected: 9.18.4.67 Affected: 9.24.1 Affected: 9.18.4.68 Affected: 9.23.1.22 Affected: 9.20.4.14 Affected: 9.22.2.20 Affected: 9.18.4.71 Affected: 9.20.4.19 Affected: 9.23.1.26 Affected: 9.16.4.89 Affected: 9.22.2.32 Affected: 9.18.4.76 Affected: 9.22.3 Affected: 9.24.1.5 Affected: 9.20.4.22 Affected: 9.24.1.9 Affected: 9.20.4.28 Affected: 9.22.3.5 Affected: 9.16.4.92 Affected: 9.18.4.135 Affected: 9.23.1.195 Affected: 9.20.4.30 Affected: 9.24.1.155 Affected: 9.23.1.32 Affected: 9.24.1.11 Affected: 9.20.4.34 Affected: 9.18.4.82 Affected: 9.24.10 Affected: 9.18.4.90 Affected: 9.20.4.46 Affected: 9.20.4.235 Affected: 9.20.4.49 Affected: 9.22.3.26 Affected: 9.16.4.103 Affected: 9.18.4.94 Affected: 9.23.1.47 Affected: 9.24.1.26 |
|
| Cisco | Cisco Secure Firewall Threat Defense (FTD) Software |
Affected:
7.0.0
Affected: 7.0.0.1 Affected: 7.0.1 Affected: 7.0.1.1 Affected: 7.0.2 Affected: 7.2.0 Affected: 7.0.2.1 Affected: 7.0.3 Affected: 7.2.0.1 Affected: 7.0.4 Affected: 7.2.1 Affected: 7.0.5 Affected: 7.3.0 Affected: 7.2.2 Affected: 7.2.3 Affected: 7.3.1 Affected: 7.2.4 Affected: 7.0.6 Affected: 7.2.5 Affected: 7.2.4.1 Affected: 7.3.1.1 Affected: 7.4.0 Affected: 7.0.6.1 Affected: 7.2.5.1 Affected: 7.4.1 Affected: 7.2.6 Affected: 7.0.6.2 Affected: 7.4.1.1 Affected: 7.2.7 Affected: 7.2.5.2 Affected: 7.3.1.2 Affected: 7.2.8 Affected: 7.6.0 Affected: 7.4.2 Affected: 7.2.8.1 Affected: 7.0.6.3 Affected: 7.4.2.1 Affected: 7.2.9 Affected: 7.0.7 Affected: 7.7.0 Affected: 7.4.2.2 Affected: 7.2.10 Affected: 7.6.1 Affected: 7.4.2.3 Affected: 7.0.8 Affected: 7.6.2 Affected: 7.7.10 Affected: 7.7.11 Affected: 7.0.8.1 Affected: 7.6.2.1 Affected: 7.7.10.1 Affected: 7.4.2.4 Affected: 7.2.10.2 Affected: 7.4.3 Affected: 7.6.4 Affected: 10.0.0 Affected: 7.4.4 Affected: 7.0.9 Affected: 7.2.11 Affected: 7.4.7 Affected: 7.4.8 Affected: 7.2.12 Affected: 7.6.6 Affected: 7.7.13 Affected: 10.0.2 Affected: 7.0.10 Affected: 10.1.0 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-76418",
"options": [
{
"Exploitation": "active"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-28T00:00:00+00:00",
"version": "2.0.3"
},
"type": "ssvc"
}
},
{
"other": {
"content": {
"dateAdded": "2026-10-29",
"reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-76418"
},
"type": "kev"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-30T03:55:57.976Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"references": [
{
"tags": [
"government-resource"
],
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-76418"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-10-29T00:00:00.000Z",
"value": "CVE-2026-76418 added to CISA KEV"
}
],
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "9.16.1"
},
{
"status": "affected",
"version": "9.16.1.28"
},
{
"status": "affected",
"version": "9.16.2"
},
{
"status": "affected",
"version": "9.16.2.3"
},
{
"status": "affected",
"version": "9.16.2.7"
},
{
"status": "affected",
"version": "9.16.2.11"
},
{
"status": "affected",
"version": "9.16.2.13"
},
{
"status": "affected",
"version": "9.16.2.14"
},
{
"status": "affected",
"version": "9.16.3.3"
},
{
"status": "affected",
"version": "9.16.3"
},
{
"status": "affected",
"version": "9.16.3.14"
},
{
"status": "affected",
"version": "9.18.1"
},
{
"status": "affected",
"version": "9.16.3.15"
},
{
"status": "affected",
"version": "9.18.1.3"
},
{
"status": "affected",
"version": "9.18.2"
},
{
"status": "affected",
"version": "9.16.3.19"
},
{
"status": "affected",
"version": "9.16.3.23"
},
{
"status": "affected",
"version": "9.18.2.5"
},
{
"status": "affected",
"version": "9.16.4"
},
{
"status": "affected",
"version": "9.18.2.7"
},
{
"status": "affected",
"version": "9.19.1"
},
{
"status": "affected",
"version": "9.16.4.9"
},
{
"status": "affected",
"version": "9.18.2.8"
},
{
"status": "affected",
"version": "9.16.4.14"
},
{
"status": "affected",
"version": "9.18.3"
},
{
"status": "affected",
"version": "9.19.1.5"
},
{
"status": "affected",
"version": "9.16.4.18"
},
{
"status": "affected",
"version": "9.19.1.9"
},
{
"status": "affected",
"version": "9.18.3.39"
},
{
"status": "affected",
"version": "9.16.4.19"
},
{
"status": "affected",
"version": "9.19.1.12"
},
{
"status": "affected",
"version": "9.18.3.46"
},
{
"status": "affected",
"version": "9.16.4.27"
},
{
"status": "affected",
"version": "9.19.1.18"
},
{
"status": "affected",
"version": "9.18.3.53"
},
{
"status": "affected",
"version": "9.18.3.55"
},
{
"status": "affected",
"version": "9.16.4.38"
},
{
"status": "affected",
"version": "9.16.4.39"
},
{
"status": "affected",
"version": "9.18.3.56"
},
{
"status": "affected",
"version": "9.20.1"
},
{
"status": "affected",
"version": "9.16.4.42"
},
{
"status": "affected",
"version": "9.19.1.22"
},
{
"status": "affected",
"version": "9.18.4"
},
{
"status": "affected",
"version": "9.20.1.5"
},
{
"status": "affected",
"version": "9.18.4.5"
},
{
"status": "affected",
"version": "9.19.1.24"
},
{
"status": "affected",
"version": "9.16.4.48"
},
{
"status": "affected",
"version": "9.18.4.8"
},
{
"status": "affected",
"version": "9.20.2"
},
{
"status": "affected",
"version": "9.19.1.27"
},
{
"status": "affected",
"version": "9.16.4.55"
},
{
"status": "affected",
"version": "9.18.4.22"
},
{
"status": "affected",
"version": "9.20.2.10"
},
{
"status": "affected",
"version": "9.16.4.57"
},
{
"status": "affected",
"version": "9.19.1.28"
},
{
"status": "affected",
"version": "9.18.4.24"
},
{
"status": "affected",
"version": "9.20.2.21"
},
{
"status": "affected",
"version": "9.16.4.61"
},
{
"status": "affected",
"version": "9.19.1.31"
},
{
"status": "affected",
"version": "9.18.4.29"
},
{
"status": "affected",
"version": "9.20.2.22"
},
{
"status": "affected",
"version": "9.16.4.62"
},
{
"status": "affected",
"version": "9.18.4.34"
},
{
"status": "affected",
"version": "9.20.3"
},
{
"status": "affected",
"version": "9.16.4.67"
},
{
"status": "affected",
"version": "9.16.4.70"
},
{
"status": "affected",
"version": "9.18.4.40"
},
{
"status": "affected",
"version": "9.23.1"
},
{
"status": "affected",
"version": "9.22.1.1"
},
{
"status": "affected",
"version": "9.16.4.71"
},
{
"status": "affected",
"version": "9.20.3.4"
},
{
"status": "affected",
"version": "9.18.4.47"
},
{
"status": "affected",
"version": "9.20.3.7"
},
{
"status": "affected",
"version": "9.19.1.37"
},
{
"status": "affected",
"version": "9.16.4.76"
},
{
"status": "affected",
"version": "9.20.3.9"
},
{
"status": "affected",
"version": "9.19.1.38"
},
{
"status": "affected",
"version": "9.18.4.50"
},
{
"status": "affected",
"version": "9.22.1.3"
},
{
"status": "affected",
"version": "9.20.3.10"
},
{
"status": "affected",
"version": "9.22.1.2"
},
{
"status": "affected",
"version": "9.18.4.52"
},
{
"status": "affected",
"version": "9.20.3.13"
},
{
"status": "affected",
"version": "9.22.1.6"
},
{
"status": "affected",
"version": "9.18.4.53"
},
{
"status": "affected",
"version": "9.16.4.82"
},
{
"status": "affected",
"version": "9.22.2"
},
{
"status": "affected",
"version": "9.20.3.16"
},
{
"status": "affected",
"version": "9.19.1.42"
},
{
"status": "affected",
"version": "9.18.4.57"
},
{
"status": "affected",
"version": "9.16.4.84"
},
{
"status": "affected",
"version": "9.23.1.3"
},
{
"status": "affected",
"version": "9.20.3.20"
},
{
"status": "affected",
"version": "9.22.2.4"
},
{
"status": "affected",
"version": "9.23.1.7"
},
{
"status": "affected",
"version": "9.20.4"
},
{
"status": "affected",
"version": "9.22.2.9"
},
{
"status": "affected",
"version": "9.23.1.13"
},
{
"status": "affected",
"version": "9.20.4.7"
},
{
"status": "affected",
"version": "9.22.2.13"
},
{
"status": "affected",
"version": "9.18.4.66"
},
{
"status": "affected",
"version": "9.20.4.10"
},
{
"status": "affected",
"version": "9.23.1.19"
},
{
"status": "affected",
"version": "9.16.4.85"
},
{
"status": "affected",
"version": "9.22.2.14"
},
{
"status": "affected",
"version": "9.18.4.67"
},
{
"status": "affected",
"version": "9.24.1"
},
{
"status": "affected",
"version": "9.18.4.68"
},
{
"status": "affected",
"version": "9.23.1.22"
},
{
"status": "affected",
"version": "9.20.4.14"
},
{
"status": "affected",
"version": "9.22.2.20"
},
{
"status": "affected",
"version": "9.18.4.71"
},
{
"status": "affected",
"version": "9.20.4.19"
},
{
"status": "affected",
"version": "9.23.1.26"
},
{
"status": "affected",
"version": "9.16.4.89"
},
{
"status": "affected",
"version": "9.22.2.32"
},
{
"status": "affected",
"version": "9.18.4.76"
},
{
"status": "affected",
"version": "9.22.3"
},
{
"status": "affected",
"version": "9.24.1.5"
},
{
"status": "affected",
"version": "9.20.4.22"
},
{
"status": "affected",
"version": "9.24.1.9"
},
{
"status": "affected",
"version": "9.20.4.28"
},
{
"status": "affected",
"version": "9.22.3.5"
},
{
"status": "affected",
"version": "9.16.4.92"
},
{
"status": "affected",
"version": "9.18.4.135"
},
{
"status": "affected",
"version": "9.23.1.195"
},
{
"status": "affected",
"version": "9.20.4.30"
},
{
"status": "affected",
"version": "9.24.1.155"
},
{
"status": "affected",
"version": "9.23.1.32"
},
{
"status": "affected",
"version": "9.24.1.11"
},
{
"status": "affected",
"version": "9.20.4.34"
},
{
"status": "affected",
"version": "9.18.4.82"
},
{
"status": "affected",
"version": "9.24.10"
},
{
"status": "affected",
"version": "9.18.4.90"
},
{
"status": "affected",
"version": "9.20.4.46"
},
{
"status": "affected",
"version": "9.20.4.235"
},
{
"status": "affected",
"version": "9.20.4.49"
},
{
"status": "affected",
"version": "9.22.3.26"
},
{
"status": "affected",
"version": "9.16.4.103"
},
{
"status": "affected",
"version": "9.18.4.94"
},
{
"status": "affected",
"version": "9.23.1.47"
},
{
"status": "affected",
"version": "9.24.1.26"
}
]
},
{
"defaultStatus": "unknown",
"product": "Cisco Secure Firewall Threat Defense (FTD) Software",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "7.0.0"
},
{
"status": "affected",
"version": "7.0.0.1"
},
{
"status": "affected",
"version": "7.0.1"
},
{
"status": "affected",
"version": "7.0.1.1"
},
{
"status": "affected",
"version": "7.0.2"
},
{
"status": "affected",
"version": "7.2.0"
},
{
"status": "affected",
"version": "7.0.2.1"
},
{
"status": "affected",
"version": "7.0.3"
},
{
"status": "affected",
"version": "7.2.0.1"
},
{
"status": "affected",
"version": "7.0.4"
},
{
"status": "affected",
"version": "7.2.1"
},
{
"status": "affected",
"version": "7.0.5"
},
{
"status": "affected",
"version": "7.3.0"
},
{
"status": "affected",
"version": "7.2.2"
},
{
"status": "affected",
"version": "7.2.3"
},
{
"status": "affected",
"version": "7.3.1"
},
{
"status": "affected",
"version": "7.2.4"
},
{
"status": "affected",
"version": "7.0.6"
},
{
"status": "affected",
"version": "7.2.5"
},
{
"status": "affected",
"version": "7.2.4.1"
},
{
"status": "affected",
"version": "7.3.1.1"
},
{
"status": "affected",
"version": "7.4.0"
},
{
"status": "affected",
"version": "7.0.6.1"
},
{
"status": "affected",
"version": "7.2.5.1"
},
{
"status": "affected",
"version": "7.4.1"
},
{
"status": "affected",
"version": "7.2.6"
},
{
"status": "affected",
"version": "7.0.6.2"
},
{
"status": "affected",
"version": "7.4.1.1"
},
{
"status": "affected",
"version": "7.2.7"
},
{
"status": "affected",
"version": "7.2.5.2"
},
{
"status": "affected",
"version": "7.3.1.2"
},
{
"status": "affected",
"version": "7.2.8"
},
{
"status": "affected",
"version": "7.6.0"
},
{
"status": "affected",
"version": "7.4.2"
},
{
"status": "affected",
"version": "7.2.8.1"
},
{
"status": "affected",
"version": "7.0.6.3"
},
{
"status": "affected",
"version": "7.4.2.1"
},
{
"status": "affected",
"version": "7.2.9"
},
{
"status": "affected",
"version": "7.0.7"
},
{
"status": "affected",
"version": "7.7.0"
},
{
"status": "affected",
"version": "7.4.2.2"
},
{
"status": "affected",
"version": "7.2.10"
},
{
"status": "affected",
"version": "7.6.1"
},
{
"status": "affected",
"version": "7.4.2.3"
},
{
"status": "affected",
"version": "7.0.8"
},
{
"status": "affected",
"version": "7.6.2"
},
{
"status": "affected",
"version": "7.7.10"
},
{
"status": "affected",
"version": "7.7.11"
},
{
"status": "affected",
"version": "7.0.8.1"
},
{
"status": "affected",
"version": "7.6.2.1"
},
{
"status": "affected",
"version": "7.7.10.1"
},
{
"status": "affected",
"version": "7.4.2.4"
},
{
"status": "affected",
"version": "7.2.10.2"
},
{
"status": "affected",
"version": "7.4.3"
},
{
"status": "affected",
"version": "7.6.4"
},
{
"status": "affected",
"version": "10.0.0"
},
{
"status": "affected",
"version": "7.4.4"
},
{
"status": "affected",
"version": "7.0.9"
},
{
"status": "affected",
"version": "7.2.11"
},
{
"status": "affected",
"version": "7.4.7"
},
{
"status": "affected",
"version": "7.4.8"
},
{
"status": "affected",
"version": "7.2.12"
},
{
"status": "affected",
"version": "7.6.6"
},
{
"status": "affected",
"version": "7.7.13"
},
{
"status": "affected",
"version": "10.0.2"
},
{
"status": "affected",
"version": "7.0.10"
},
{
"status": "affected",
"version": "10.1.0"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due to logic errors when secondary authentication is configured on a tunnel group. An attacker could exploit this vulnerability by sending a crafted request when connecting to the SSL remote access VPN. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition."
}
],
"exploits": [
{
"lang": "en",
"value": "In October 2026, the Cisco PSIRT became aware of active exploitation of this vulnerability. Cisco strongly recommends that customers upgrade to a fixed software release to remediate this vulnerability."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-690",
"description": "Unchecked Return Value to NULL Pointer Dereference",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-28T20:05:31.926Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-asaftd-tunnel-dos-s6mgkb75",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-tunnel-dos-s6mgkb75"
}
],
"source": {
"advisory": "cisco-sa-asaftd-tunnel-dos-s6mgkb75",
"defects": [
"CSCwx26625"
],
"discovery": "EXTERNAL"
},
"title": "Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2026-76418",
"datePublished": "2026-10-28T20:05:31.926Z",
"dateReserved": "2026-08-19T12:02:03.633Z",
"dateUpdated": "2026-10-30T03:55:57.976Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-76497 (GCVE-0-2026-76497)
Vulnerability from cvelistv5 – Published: 2026-10-21 16:18 – Updated: 2026-11-07 17:29
VLAI
EPSS
VEX
CVE Program bundle warning
The CVE Program recognizes that this CVE Record provides vulnerability information that a Supplier CNA believes is very important to consumers. The CVE Program has flagged this CVE Record as it assigns a single CVE ID to a collection of individual vulnerabilities which does not align with CVE's "one vulnerability, one ID" principle, and therefore provides incomplete information. For further clarification, please see the CVE Program's blog, "Preserving Vulnerability-Level Identification" linked below. Details within the CNA container below are viewable by clicking on the CNA name.
https://www.cve.org/Media/News/item/blog/2026/06/…Title
Cisco Expressway Series Software Hardening Release: October 2026 - Insecure Temporary File Vulnerabilities
Summary
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.
The vulnerabilities tracked by CVE-2026-76497 are related to issues concerning insecure temporary files that are grouped under the Common Weakness Enumeration (CWE) Base CWE-377.
Severity
6.6 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-21 17:11 UTC
CWE
- CWE-377 - Insecure Temporary File
Assigner
cisco
CNA
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Cisco | Cisco TelePresence Video Communication Server (VCS) Expressway |
Affected:
X8.11.2
Affected: X8.6 Affected: X8.11.3 Affected: X8.2.2 Affected: X8.8.3 Affected: X8.11.0 Affected: X12.5.2 Affected: X8.1.1 Affected: X8.9 Affected: X12.5.1 Affected: X12.5.6 Affected: X8.7.3 Affected: X12.6.0 Affected: X8.11.1 Affected: X8.5 Affected: X8.9.1 Affected: X8.10.2 Affected: X8.8.2 Affected: X8.5.3 Affected: X8.1 Affected: X8.9.2 Affected: X8.11.4 Affected: X12.5.4 Affected: X8.8.1 Affected: X8.2.1 Affected: X8.5.1 Affected: X8.6.1 Affected: X8.1.2 Affected: X8.8 Affected: X8.10.0 Affected: X12.5.3 Affected: X8.10.1 Affected: X12.5.7 Affected: X8.10.3 Affected: X8.7.1 Affected: X8.2 Affected: X12.5.8 Affected: X8.7 Affected: X8.5.2 Affected: X12.5.9 Affected: X12.5.0 Affected: X8.10.4 Affected: X8.7.2 Affected: X12.5.5 Affected: X12.6.1 Affected: X12.6.2 Affected: X12.6.3 Affected: X12.6.4 Affected: X12.7.0 Affected: X12.7.1 Affected: X14.0.0 Affected: X14.0.1 Affected: X14.0.2 Affected: X14.0.3 Affected: X14.0.4 Affected: X14.0.5 Affected: X14.0.6 Affected: X14.0.7 Affected: X14.0.8 Affected: X14.2.0 Affected: X14.0.9 Affected: X14.2.1 Affected: X14.2.2 Affected: X14.0.11 Affected: X14.2.5 Affected: X14.0.10 Affected: X14.2.6 Affected: X14.2.7 Affected: X14.3.0 Affected: X14.3.1 Affected: X14.3.2 Affected: X14.3.3 Affected: X15.0.0 Affected: X14.3.4 Affected: X14.3.5 Affected: X15.0.1 Affected: X15.0.2 Affected: X15.0.3 Affected: X14.3.6 Affected: X15.2.0 Affected: X15.2.1 Affected: X15.2.2 Affected: X15.2.3 Affected: X14.3.7 Affected: X15.2.4. Affected: X15.2.4 Affected: X15.3.0 Affected: X15.3.1 Affected: X15.3.2 Affected: X15.4.0 Affected: X15.5.0 Affected: X15.5.1 Affected: X15.5.2 Affected: X15.5.3 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-76497",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-21T17:11:28.451935Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-22T13:37:51.735Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"descriptions": [
{
"lang": "en",
"value": "The CVE Program recognizes that this CVE Record provides vulnerability information that a Supplier CNA believes is very important to consumers. The CVE Program has flagged this CVE Record as it assigns a single CVE ID to a collection of individual vulnerabilities which does not align with CVE\u0027s \"one vulnerability, one ID\" principle, and therefore provides incomplete information. For further clarification, please see the CVE Program\u0027s blog, \"Preserving Vulnerability-Level Identification\" linked below. Details within the CNA container below are viewable by clicking on the CNA name."
}
],
"providerMetadata": {
"dateUpdated": "2026-11-07T17:29:44.149Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"url": "https://www.cve.org/Media/News/item/blog/2026/06/16/Preserving-Vulnerability-Level-Identification"
}
],
"tags": [
"x_bundling-flagged-by-CVE-Program"
]
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Cisco TelePresence Video Communication Server (VCS) Expressway",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "X8.11.2"
},
{
"status": "affected",
"version": "X8.6"
},
{
"status": "affected",
"version": "X8.11.3"
},
{
"status": "affected",
"version": "X8.2.2"
},
{
"status": "affected",
"version": "X8.8.3"
},
{
"status": "affected",
"version": "X8.11.0"
},
{
"status": "affected",
"version": "X12.5.2"
},
{
"status": "affected",
"version": "X8.1.1"
},
{
"status": "affected",
"version": "X8.9"
},
{
"status": "affected",
"version": "X12.5.1"
},
{
"status": "affected",
"version": "X12.5.6"
},
{
"status": "affected",
"version": "X8.7.3"
},
{
"status": "affected",
"version": "X12.6.0"
},
{
"status": "affected",
"version": "X8.11.1"
},
{
"status": "affected",
"version": "X8.5"
},
{
"status": "affected",
"version": "X8.9.1"
},
{
"status": "affected",
"version": "X8.10.2"
},
{
"status": "affected",
"version": "X8.8.2"
},
{
"status": "affected",
"version": "X8.5.3"
},
{
"status": "affected",
"version": "X8.1"
},
{
"status": "affected",
"version": "X8.9.2"
},
{
"status": "affected",
"version": "X8.11.4"
},
{
"status": "affected",
"version": "X12.5.4"
},
{
"status": "affected",
"version": "X8.8.1"
},
{
"status": "affected",
"version": "X8.2.1"
},
{
"status": "affected",
"version": "X8.5.1"
},
{
"status": "affected",
"version": "X8.6.1"
},
{
"status": "affected",
"version": "X8.1.2"
},
{
"status": "affected",
"version": "X8.8"
},
{
"status": "affected",
"version": "X8.10.0"
},
{
"status": "affected",
"version": "X12.5.3"
},
{
"status": "affected",
"version": "X8.10.1"
},
{
"status": "affected",
"version": "X12.5.7"
},
{
"status": "affected",
"version": "X8.10.3"
},
{
"status": "affected",
"version": "X8.7.1"
},
{
"status": "affected",
"version": "X8.2"
},
{
"status": "affected",
"version": "X12.5.8"
},
{
"status": "affected",
"version": "X8.7"
},
{
"status": "affected",
"version": "X8.5.2"
},
{
"status": "affected",
"version": "X12.5.9"
},
{
"status": "affected",
"version": "X12.5.0"
},
{
"status": "affected",
"version": "X8.10.4"
},
{
"status": "affected",
"version": "X8.7.2"
},
{
"status": "affected",
"version": "X12.5.5"
},
{
"status": "affected",
"version": "X12.6.1"
},
{
"status": "affected",
"version": "X12.6.2"
},
{
"status": "affected",
"version": "X12.6.3"
},
{
"status": "affected",
"version": "X12.6.4"
},
{
"status": "affected",
"version": "X12.7.0"
},
{
"status": "affected",
"version": "X12.7.1"
},
{
"status": "affected",
"version": "X14.0.0"
},
{
"status": "affected",
"version": "X14.0.1"
},
{
"status": "affected",
"version": "X14.0.2"
},
{
"status": "affected",
"version": "X14.0.3"
},
{
"status": "affected",
"version": "X14.0.4"
},
{
"status": "affected",
"version": "X14.0.5"
},
{
"status": "affected",
"version": "X14.0.6"
},
{
"status": "affected",
"version": "X14.0.7"
},
{
"status": "affected",
"version": "X14.0.8"
},
{
"status": "affected",
"version": "X14.2.0"
},
{
"status": "affected",
"version": "X14.0.9"
},
{
"status": "affected",
"version": "X14.2.1"
},
{
"status": "affected",
"version": "X14.2.2"
},
{
"status": "affected",
"version": "X14.0.11"
},
{
"status": "affected",
"version": "X14.2.5"
},
{
"status": "affected",
"version": "X14.0.10"
},
{
"status": "affected",
"version": "X14.2.6"
},
{
"status": "affected",
"version": "X14.2.7"
},
{
"status": "affected",
"version": "X14.3.0"
},
{
"status": "affected",
"version": "X14.3.1"
},
{
"status": "affected",
"version": "X14.3.2"
},
{
"status": "affected",
"version": "X14.3.3"
},
{
"status": "affected",
"version": "X15.0.0"
},
{
"status": "affected",
"version": "X14.3.4"
},
{
"status": "affected",
"version": "X14.3.5"
},
{
"status": "affected",
"version": "X15.0.1"
},
{
"status": "affected",
"version": "X15.0.2"
},
{
"status": "affected",
"version": "X15.0.3"
},
{
"status": "affected",
"version": "X14.3.6"
},
{
"status": "affected",
"version": "X15.2.0"
},
{
"status": "affected",
"version": "X15.2.1"
},
{
"status": "affected",
"version": "X15.2.2"
},
{
"status": "affected",
"version": "X15.2.3"
},
{
"status": "affected",
"version": "X14.3.7"
},
{
"status": "affected",
"version": "X15.2.4."
},
{
"status": "affected",
"version": "X15.2.4"
},
{
"status": "affected",
"version": "X15.3.0"
},
{
"status": "affected",
"version": "X15.3.1"
},
{
"status": "affected",
"version": "X15.3.2"
},
{
"status": "affected",
"version": "X15.4.0"
},
{
"status": "affected",
"version": "X15.5.0"
},
{
"status": "affected",
"version": "X15.5.1"
},
{
"status": "affected",
"version": "X15.5.2"
},
{
"status": "affected",
"version": "X15.5.3"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "As part of Cisco\u0027s ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. \u0026nbsp;\r\n\r\nThe vulnerabilities tracked by CVE-2026-76497 are related to issues concerning insecure temporary files that are grouped under the Common Weakness Enumeration (CWE) Base CWE-377."
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-377",
"description": "Insecure Temporary File",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-21T16:18:13.854Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-exwy-hardening-FhcqBVcs",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-exwy-hardening-FhcqBVcs"
}
],
"source": {
"advisory": "cisco-sa-exwy-hardening-FhcqBVcs",
"defects": [
"CSCww67924"
],
"discovery": "INTERNAL"
},
"title": "Cisco Expressway Series Software Hardening Release: October 2026 - Insecure Temporary File Vulnerabilities"
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2026-76497",
"datePublished": "2026-10-21T16:18:13.854Z",
"dateReserved": "2026-08-19T12:02:03.640Z",
"dateUpdated": "2026-11-07T17:29:44.149Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-76505 (GCVE-0-2026-76505)
Vulnerability from cvelistv5 – Published: 2026-10-21 16:18 – Updated: 2026-10-22 13:37
VLAI
EPSS
VEX
Title
Cisco IOS XR Software for ASR 9000 Series Routers IPv4 Unicast Packets Denial of Service Vulnerability
Summary
A vulnerability in the IPv4 packet processing functionality of Cisco IOS XR Software that affects Cisco ASR 9000 and 9900 Series Aggregation Services Routers as well as Cisco ASR 9902 and 9903 Compact High-Performance Routers could allow an unauthenticated, remote attacker to cause network processor (NP) errors, resulting in a line card reset or shutdown and a denial of service (DoS) condition.
This vulnerability is due to the incorrect handling of crafted IPv4 packets that are received on an affected line card interface and processed as for-us traffic. The issue can result in an NP reset, causing traffic loss on the affected line card while it recovers. Under repeated reset conditions, the network processor may enter a persistent shutdown state, in which case an explicit line card reload may be required to restore traffic.
The vulnerability is within the IPv4 packet-processing path. Transit IPv4 traffic does not trigger this issue and IPv6 traffic cannot trigger it.
Severity
7.5 (High)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-21 17:11 UTC
CWE
- CWE-20 - Improper Input Validation
Assigner
cisco
CNA
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Cisco | Cisco IOS XR Software |
Affected:
7.0.1
Affected: 7.1.1 Affected: 7.0.90 Affected: 6.7.1 Affected: 7.0.2 Affected: 7.1.15 Affected: 7.1.2 Affected: 6.7.2 Affected: 7.1.25 Affected: 7.1.3 Affected: 6.7.3 Affected: 7.3.1 Affected: 7.4.1 Affected: 6.8.1 Affected: 7.3.2 Affected: 7.5.1 Affected: 7.6.1 Affected: 7.5.2 Affected: 7.3.3 Affected: 6.8.2 Affected: 7.7.1 Affected: 7.4.2 Affected: 7.3.4 Affected: 6.7.35 Affected: 6.9.1 Affected: 7.6.2 Affected: 7.8.1 Affected: 7.5.3 Affected: 7.7.2 Affected: 6.9.2 Affected: 7.9.1 Affected: 7.8.2 Affected: 7.5.4 Affected: 7.8.22 Affected: 7.10.1 Affected: 7.9.2 Affected: 7.3.5 Affected: 7.5.5 Affected: 7.11.1 Affected: 7.9.21 Affected: 7.10.2 Affected: 24.1.1 Affected: 7.11.2 Affected: 24.2.1 Affected: 24.1.2 Affected: 24.3.1 Affected: 24.4.1 Affected: 24.2.2 Affected: 7.8.23 Affected: 7.11.21 Affected: 24.3.2 Affected: 24.3.20 Affected: 24.3.30 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-76505",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-21T17:11:38.778800Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-22T13:37:51.885Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Cisco IOS XR Software",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "7.0.1"
},
{
"status": "affected",
"version": "7.1.1"
},
{
"status": "affected",
"version": "7.0.90"
},
{
"status": "affected",
"version": "6.7.1"
},
{
"status": "affected",
"version": "7.0.2"
},
{
"status": "affected",
"version": "7.1.15"
},
{
"status": "affected",
"version": "7.1.2"
},
{
"status": "affected",
"version": "6.7.2"
},
{
"status": "affected",
"version": "7.1.25"
},
{
"status": "affected",
"version": "7.1.3"
},
{
"status": "affected",
"version": "6.7.3"
},
{
"status": "affected",
"version": "7.3.1"
},
{
"status": "affected",
"version": "7.4.1"
},
{
"status": "affected",
"version": "6.8.1"
},
{
"status": "affected",
"version": "7.3.2"
},
{
"status": "affected",
"version": "7.5.1"
},
{
"status": "affected",
"version": "7.6.1"
},
{
"status": "affected",
"version": "7.5.2"
},
{
"status": "affected",
"version": "7.3.3"
},
{
"status": "affected",
"version": "6.8.2"
},
{
"status": "affected",
"version": "7.7.1"
},
{
"status": "affected",
"version": "7.4.2"
},
{
"status": "affected",
"version": "7.3.4"
},
{
"status": "affected",
"version": "6.7.35"
},
{
"status": "affected",
"version": "6.9.1"
},
{
"status": "affected",
"version": "7.6.2"
},
{
"status": "affected",
"version": "7.8.1"
},
{
"status": "affected",
"version": "7.5.3"
},
{
"status": "affected",
"version": "7.7.2"
},
{
"status": "affected",
"version": "6.9.2"
},
{
"status": "affected",
"version": "7.9.1"
},
{
"status": "affected",
"version": "7.8.2"
},
{
"status": "affected",
"version": "7.5.4"
},
{
"status": "affected",
"version": "7.8.22"
},
{
"status": "affected",
"version": "7.10.1"
},
{
"status": "affected",
"version": "7.9.2"
},
{
"status": "affected",
"version": "7.3.5"
},
{
"status": "affected",
"version": "7.5.5"
},
{
"status": "affected",
"version": "7.11.1"
},
{
"status": "affected",
"version": "7.9.21"
},
{
"status": "affected",
"version": "7.10.2"
},
{
"status": "affected",
"version": "24.1.1"
},
{
"status": "affected",
"version": "7.11.2"
},
{
"status": "affected",
"version": "24.2.1"
},
{
"status": "affected",
"version": "24.1.2"
},
{
"status": "affected",
"version": "24.3.1"
},
{
"status": "affected",
"version": "24.4.1"
},
{
"status": "affected",
"version": "24.2.2"
},
{
"status": "affected",
"version": "7.8.23"
},
{
"status": "affected",
"version": "7.11.21"
},
{
"status": "affected",
"version": "24.3.2"
},
{
"status": "affected",
"version": "24.3.20"
},
{
"status": "affected",
"version": "24.3.30"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the IPv4 packet processing functionality of Cisco IOS XR Software that affects Cisco ASR 9000 and 9900 Series Aggregation Services Routers as well as Cisco ASR 9902 and 9903 Compact High-Performance Routers could allow an unauthenticated, remote attacker to cause network processor (NP) errors, resulting in a line card reset or shutdown and a denial of service (DoS) condition.\u0026nbsp;\r\n\r\nThis vulnerability is due to the incorrect handling of crafted IPv4 packets that are received on an affected line card interface and processed as for-us traffic. The issue can result in an NP reset, causing traffic loss on the affected line card while it recovers. Under repeated reset conditions, the network processor may enter a persistent shutdown state, in which case an explicit line card reload may be required to restore traffic.\r\nThe vulnerability is within the IPv4 packet-processing path. Transit IPv4 traffic does not trigger this issue and IPv6 traffic cannot trigger it."
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-20",
"description": "Improper Input Validation",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-21T16:18:12.195Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-asr9k-tUyxcyXN",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asr9k-tUyxcyXN"
}
],
"source": {
"advisory": "cisco-sa-asr9k-tUyxcyXN",
"defects": [
"CSCwn39554"
],
"discovery": "INTERNAL"
},
"title": "Cisco IOS XR Software for ASR 9000 Series Routers IPv4 Unicast Packets Denial of Service Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2026-76505",
"datePublished": "2026-10-21T16:18:12.195Z",
"dateReserved": "2026-08-19T12:02:03.641Z",
"dateUpdated": "2026-10-22T13:37:51.885Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-76524 (GCVE-0-2026-76524)
Vulnerability from cvelistv5 – Published: 2026-10-21 16:18 – Updated: 2026-10-22 13:37
VLAI
EPSS
VEX
Title
Open Source Snort 3 Control Channel Socket Aribitrary Command Execution Vulnerability
Summary
A vulnerability in the control channel socket implementation of Open Source Snort 3 could allow an authenticated, local attacker with low privileges to execute arbitrary commands as the Snort 3 process user.
This vulnerability is due to a lack of authentication when a local user connects to the Snort control channel socket. An attacker could exploit this vulnerability by connecting to the Snort 3 control channel socket as a local user. A successful exploit could allow the attacker to execute arbitrary commands as well as read and write Snort 3 process memory.
Severity
7.8 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-21 17:12 UTC
CWE
- CWE-306 - Missing Authentication for Critical Function
Assigner
cisco
CNA
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Cisco | Cisco Open Source Snort3 |
Affected:
3.12.2.0
Affected: 3.1.2.0 Affected: 3.1.3.0 Affected: 3.1.4.0 Affected: 3.1.5.0 Affected: 3.1.6.0 Affected: 3.1.7.0 Affected: 3.1.8.0 Affected: 3.1.9.0 Affected: 3.1.10.0 Affected: 3.1.12.0 Affected: 3.1.13.0 Affected: 3.1.14.0 Affected: 3.1.15.0 Affected: 3.1.16.0 Affected: 3.1.17.0 Affected: 3.1.18.0 Affected: 3.1.19.0 Affected: 3.1.20.0 Affected: 3.1.21.0 Affected: 3.1.22.0 Affected: 3.1.23.0 Affected: 3.1.24.0 Affected: 3.1.25.0 Affected: 3.1.27.0 Affected: 3.1.28.0 Affected: 3.1.29.0 Affected: 3.1.30.0 Affected: 3.1.31.0 Affected: 3.1.32.0 Affected: 3.1.36.0 Affected: 3.1.38.0 Affected: 3.1.39.0 Affected: 3.1.40.0 Affected: 3.1.41.0 Affected: 3.1.42.0 Affected: 3.1.43.0 Affected: 3.1.45.0 Affected: 3.1.47.0 Affected: 3.1.48.0 Affected: 3.1.50.0 Affected: 3.1.51.0 Affected: 3.1.52.0 Affected: 3.1.53.0 Affected: 3.1.55.0 Affected: 3.1.56.0 Affected: 3.1.57.0 Affected: 3.1.58.0 Affected: 3.1.59.0 Affected: 3.1.60.0 Affected: 3.1.61.0 Affected: 3.1.62.0 Affected: 3.1.63.0 Affected: 3.1.64.0 Affected: 3.1.65.0 Affected: 3.1.66.0 Affected: 3.1.67.0 Affected: 3.1.69.0 Affected: 3.1.70.0 Affected: 3.1.71.0 Affected: 3.1.72.0 Affected: 3.1.73.0 Affected: 3.1.74.0 Affected: 3.1.75.0 Affected: 3.1.76.0 Affected: 3.1.77.0 Affected: 3.1.78.0 Affected: 3.1.81.0 Affected: 3.1.82.0 Affected: 3.1.83.0 Affected: 3.1.84.0 Affected: 3.2.1.0 Affected: 3.2.2.0 Affected: 3.3.0.0 Affected: 3.3.1.0 Affected: 3.3.2.0 Affected: 3.3.3.0 Affected: 3.3.4.0 Affected: 3.3.5.0 Affected: 3.3.7.0 Affected: 3.5.0.0 Affected: 3.5.1.0 Affected: 3.8.1.0 Affected: 3.6.0.0 Affected: 3.6.2.0 Affected: 3.9.3.0 Affected: 3.7.2.0 Affected: 3.7.0.0 Affected: 3.9.6.0 Affected: 3.10.0.0 Affected: 3.10.2.0 Affected: 3.7.4.0 Affected: 3.9.0.0 Affected: 3.5.2.0 Affected: 3.12.1.0 Affected: 3.6.1.0 Affected: 3.9.2.0 Affected: 3.6.3.0 Affected: 3.9.5.0 Affected: 3.7.1.0 Affected: 3.9.7.0 Affected: 3.7.3.0 Affected: 3.10.1.0 Affected: 3.9.1.0 Affected: 3.11.1.0 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-76524",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-21T17:12:12.638552Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-22T13:37:52.029Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Cisco Open Source Snort3",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "3.12.2.0"
},
{
"status": "affected",
"version": "3.1.2.0"
},
{
"status": "affected",
"version": "3.1.3.0"
},
{
"status": "affected",
"version": "3.1.4.0"
},
{
"status": "affected",
"version": "3.1.5.0"
},
{
"status": "affected",
"version": "3.1.6.0"
},
{
"status": "affected",
"version": "3.1.7.0"
},
{
"status": "affected",
"version": "3.1.8.0"
},
{
"status": "affected",
"version": "3.1.9.0"
},
{
"status": "affected",
"version": "3.1.10.0"
},
{
"status": "affected",
"version": "3.1.12.0"
},
{
"status": "affected",
"version": "3.1.13.0"
},
{
"status": "affected",
"version": "3.1.14.0"
},
{
"status": "affected",
"version": "3.1.15.0"
},
{
"status": "affected",
"version": "3.1.16.0"
},
{
"status": "affected",
"version": "3.1.17.0"
},
{
"status": "affected",
"version": "3.1.18.0"
},
{
"status": "affected",
"version": "3.1.19.0"
},
{
"status": "affected",
"version": "3.1.20.0"
},
{
"status": "affected",
"version": "3.1.21.0"
},
{
"status": "affected",
"version": "3.1.22.0"
},
{
"status": "affected",
"version": "3.1.23.0"
},
{
"status": "affected",
"version": "3.1.24.0"
},
{
"status": "affected",
"version": "3.1.25.0"
},
{
"status": "affected",
"version": "3.1.27.0"
},
{
"status": "affected",
"version": "3.1.28.0"
},
{
"status": "affected",
"version": "3.1.29.0"
},
{
"status": "affected",
"version": "3.1.30.0"
},
{
"status": "affected",
"version": "3.1.31.0"
},
{
"status": "affected",
"version": "3.1.32.0"
},
{
"status": "affected",
"version": "3.1.36.0"
},
{
"status": "affected",
"version": "3.1.38.0"
},
{
"status": "affected",
"version": "3.1.39.0"
},
{
"status": "affected",
"version": "3.1.40.0"
},
{
"status": "affected",
"version": "3.1.41.0"
},
{
"status": "affected",
"version": "3.1.42.0"
},
{
"status": "affected",
"version": "3.1.43.0"
},
{
"status": "affected",
"version": "3.1.45.0"
},
{
"status": "affected",
"version": "3.1.47.0"
},
{
"status": "affected",
"version": "3.1.48.0"
},
{
"status": "affected",
"version": "3.1.50.0"
},
{
"status": "affected",
"version": "3.1.51.0"
},
{
"status": "affected",
"version": "3.1.52.0"
},
{
"status": "affected",
"version": "3.1.53.0"
},
{
"status": "affected",
"version": "3.1.55.0"
},
{
"status": "affected",
"version": "3.1.56.0"
},
{
"status": "affected",
"version": "3.1.57.0"
},
{
"status": "affected",
"version": "3.1.58.0"
},
{
"status": "affected",
"version": "3.1.59.0"
},
{
"status": "affected",
"version": "3.1.60.0"
},
{
"status": "affected",
"version": "3.1.61.0"
},
{
"status": "affected",
"version": "3.1.62.0"
},
{
"status": "affected",
"version": "3.1.63.0"
},
{
"status": "affected",
"version": "3.1.64.0"
},
{
"status": "affected",
"version": "3.1.65.0"
},
{
"status": "affected",
"version": "3.1.66.0"
},
{
"status": "affected",
"version": "3.1.67.0"
},
{
"status": "affected",
"version": "3.1.69.0"
},
{
"status": "affected",
"version": "3.1.70.0"
},
{
"status": "affected",
"version": "3.1.71.0"
},
{
"status": "affected",
"version": "3.1.72.0"
},
{
"status": "affected",
"version": "3.1.73.0"
},
{
"status": "affected",
"version": "3.1.74.0"
},
{
"status": "affected",
"version": "3.1.75.0"
},
{
"status": "affected",
"version": "3.1.76.0"
},
{
"status": "affected",
"version": "3.1.77.0"
},
{
"status": "affected",
"version": "3.1.78.0"
},
{
"status": "affected",
"version": "3.1.81.0"
},
{
"status": "affected",
"version": "3.1.82.0"
},
{
"status": "affected",
"version": "3.1.83.0"
},
{
"status": "affected",
"version": "3.1.84.0"
},
{
"status": "affected",
"version": "3.2.1.0"
},
{
"status": "affected",
"version": "3.2.2.0"
},
{
"status": "affected",
"version": "3.3.0.0"
},
{
"status": "affected",
"version": "3.3.1.0"
},
{
"status": "affected",
"version": "3.3.2.0"
},
{
"status": "affected",
"version": "3.3.3.0"
},
{
"status": "affected",
"version": "3.3.4.0"
},
{
"status": "affected",
"version": "3.3.5.0"
},
{
"status": "affected",
"version": "3.3.7.0"
},
{
"status": "affected",
"version": "3.5.0.0"
},
{
"status": "affected",
"version": "3.5.1.0"
},
{
"status": "affected",
"version": "3.8.1.0"
},
{
"status": "affected",
"version": "3.6.0.0"
},
{
"status": "affected",
"version": "3.6.2.0"
},
{
"status": "affected",
"version": "3.9.3.0"
},
{
"status": "affected",
"version": "3.7.2.0"
},
{
"status": "affected",
"version": "3.7.0.0"
},
{
"status": "affected",
"version": "3.9.6.0"
},
{
"status": "affected",
"version": "3.10.0.0"
},
{
"status": "affected",
"version": "3.10.2.0"
},
{
"status": "affected",
"version": "3.7.4.0"
},
{
"status": "affected",
"version": "3.9.0.0"
},
{
"status": "affected",
"version": "3.5.2.0"
},
{
"status": "affected",
"version": "3.12.1.0"
},
{
"status": "affected",
"version": "3.6.1.0"
},
{
"status": "affected",
"version": "3.9.2.0"
},
{
"status": "affected",
"version": "3.6.3.0"
},
{
"status": "affected",
"version": "3.9.5.0"
},
{
"status": "affected",
"version": "3.7.1.0"
},
{
"status": "affected",
"version": "3.9.7.0"
},
{
"status": "affected",
"version": "3.7.3.0"
},
{
"status": "affected",
"version": "3.10.1.0"
},
{
"status": "affected",
"version": "3.9.1.0"
},
{
"status": "affected",
"version": "3.11.1.0"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the control channel socket implementation of\u0026nbsp;Open Source Snort 3 could allow an authenticated, local attacker with low privileges to execute arbitrary commands as the Snort 3 process user.\r\n\r\nThis vulnerability is due to a lack of authentication when a local user connects to the Snort control channel socket. An attacker could exploit this vulnerability by connecting to the Snort 3 control channel socket as a local user. A successful exploit could allow the attacker to execute arbitrary commands as well as read and write Snort 3 process memory."
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-306",
"description": "Missing Authentication for Critical Function",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-21T16:18:12.052Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-opensrc-snort3-2fXGJPfe",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-opensrc-snort3-2fXGJPfe"
}
],
"source": {
"advisory": "cisco-sa-opensrc-snort3-2fXGJPfe",
"defects": [
"CSCwv48789"
],
"discovery": "EXTERNAL"
},
"title": "Open Source Snort 3 Control Channel Socket Aribitrary Command Execution Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2026-76524",
"datePublished": "2026-10-21T16:18:12.052Z",
"dateReserved": "2026-08-19T12:02:03.643Z",
"dateUpdated": "2026-10-22T13:37:52.029Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-76496 (GCVE-0-2026-76496)
Vulnerability from cvelistv5 – Published: 2026-10-21 16:18 – Updated: 2026-11-07 17:29
VLAI
EPSS
VEX
CVE Program bundle warning
The CVE Program recognizes that this CVE Record provides vulnerability information that a Supplier CNA believes is very important to consumers. The CVE Program has flagged this CVE Record as it assigns a single CVE ID to a collection of individual vulnerabilities which does not align with CVE's "one vulnerability, one ID" principle, and therefore provides incomplete information. For further clarification, please see the CVE Program's blog, "Preserving Vulnerability-Level Identification" linked below. Details within the CNA container below are viewable by clicking on the CNA name.
https://www.cve.org/Media/News/item/blog/2026/06/…Title
Cisco Expressway Series Software Hardening Release: October 2026 - Improper Link Resolution Vulnerabilities
Summary
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.
The vulnerabilities tracked by CVE-2026-76496 are related to issues concerning improper link resolutions that are grouped under the Common Weakness Enumeration (CWE) Base CWE-59.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-21 00:00 UTC
CWE
- CWE-59 - Improper Link Resolution Before File Access ('Link Following')
Assigner
cisco
CNA
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Cisco | Cisco TelePresence Video Communication Server (VCS) Expressway |
Affected:
X8.11.2
Affected: X8.6 Affected: X8.11.3 Affected: X8.2.2 Affected: X8.8.3 Affected: X8.11.0 Affected: X12.5.2 Affected: X8.1.1 Affected: X8.9 Affected: X12.5.1 Affected: X12.5.6 Affected: X8.7.3 Affected: X12.6.0 Affected: X8.11.1 Affected: X8.5 Affected: X8.9.1 Affected: X8.10.2 Affected: X8.8.2 Affected: X8.5.3 Affected: X8.1 Affected: X8.9.2 Affected: X8.11.4 Affected: X12.5.4 Affected: X8.8.1 Affected: X8.2.1 Affected: X8.5.1 Affected: X8.6.1 Affected: X8.1.2 Affected: X8.8 Affected: X8.10.0 Affected: X12.5.3 Affected: X8.10.1 Affected: X12.5.7 Affected: X8.10.3 Affected: X8.7.1 Affected: X8.2 Affected: X12.5.8 Affected: X8.7 Affected: X8.5.2 Affected: X12.5.9 Affected: X12.5.0 Affected: X8.10.4 Affected: X8.7.2 Affected: X12.5.5 Affected: X12.6.1 Affected: X12.6.2 Affected: X12.6.3 Affected: X12.6.4 Affected: X12.7.0 Affected: X12.7.1 Affected: X14.0.0 Affected: X14.0.1 Affected: X14.0.2 Affected: X14.0.3 Affected: X14.0.4 Affected: X14.0.5 Affected: X14.0.6 Affected: X14.0.7 Affected: X14.0.8 Affected: X14.2.0 Affected: X14.0.9 Affected: X14.2.1 Affected: X14.2.2 Affected: X14.0.11 Affected: X14.2.5 Affected: X14.0.10 Affected: X14.2.6 Affected: X14.2.7 Affected: X14.3.0 Affected: X14.3.1 Affected: X14.3.2 Affected: X14.3.3 Affected: X15.0.0 Affected: X14.3.4 Affected: X14.3.5 Affected: X15.0.1 Affected: X15.0.2 Affected: X15.0.3 Affected: X14.3.6 Affected: X15.2.0 Affected: X15.2.1 Affected: X15.2.2 Affected: X15.2.3 Affected: X14.3.7 Affected: X15.2.4. Affected: X15.2.4 Affected: X15.3.0 Affected: X15.3.1 Affected: X15.3.2 Affected: X15.4.0 Affected: X15.5.0 Affected: X15.5.1 Affected: X15.5.2 Affected: X15.5.3 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-76496",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-21T00:00:00+00:00",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-22T23:04:51.142Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"descriptions": [
{
"lang": "en",
"value": "The CVE Program recognizes that this CVE Record provides vulnerability information that a Supplier CNA believes is very important to consumers. The CVE Program has flagged this CVE Record as it assigns a single CVE ID to a collection of individual vulnerabilities which does not align with CVE\u0027s \"one vulnerability, one ID\" principle, and therefore provides incomplete information. For further clarification, please see the CVE Program\u0027s blog, \"Preserving Vulnerability-Level Identification\" linked below. Details within the CNA container below are viewable by clicking on the CNA name."
}
],
"providerMetadata": {
"dateUpdated": "2026-11-07T17:29:44.041Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"url": "https://www.cve.org/Media/News/item/blog/2026/06/16/Preserving-Vulnerability-Level-Identification"
}
],
"tags": [
"x_bundling-flagged-by-CVE-Program"
]
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Cisco TelePresence Video Communication Server (VCS) Expressway",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "X8.11.2"
},
{
"status": "affected",
"version": "X8.6"
},
{
"status": "affected",
"version": "X8.11.3"
},
{
"status": "affected",
"version": "X8.2.2"
},
{
"status": "affected",
"version": "X8.8.3"
},
{
"status": "affected",
"version": "X8.11.0"
},
{
"status": "affected",
"version": "X12.5.2"
},
{
"status": "affected",
"version": "X8.1.1"
},
{
"status": "affected",
"version": "X8.9"
},
{
"status": "affected",
"version": "X12.5.1"
},
{
"status": "affected",
"version": "X12.5.6"
},
{
"status": "affected",
"version": "X8.7.3"
},
{
"status": "affected",
"version": "X12.6.0"
},
{
"status": "affected",
"version": "X8.11.1"
},
{
"status": "affected",
"version": "X8.5"
},
{
"status": "affected",
"version": "X8.9.1"
},
{
"status": "affected",
"version": "X8.10.2"
},
{
"status": "affected",
"version": "X8.8.2"
},
{
"status": "affected",
"version": "X8.5.3"
},
{
"status": "affected",
"version": "X8.1"
},
{
"status": "affected",
"version": "X8.9.2"
},
{
"status": "affected",
"version": "X8.11.4"
},
{
"status": "affected",
"version": "X12.5.4"
},
{
"status": "affected",
"version": "X8.8.1"
},
{
"status": "affected",
"version": "X8.2.1"
},
{
"status": "affected",
"version": "X8.5.1"
},
{
"status": "affected",
"version": "X8.6.1"
},
{
"status": "affected",
"version": "X8.1.2"
},
{
"status": "affected",
"version": "X8.8"
},
{
"status": "affected",
"version": "X8.10.0"
},
{
"status": "affected",
"version": "X12.5.3"
},
{
"status": "affected",
"version": "X8.10.1"
},
{
"status": "affected",
"version": "X12.5.7"
},
{
"status": "affected",
"version": "X8.10.3"
},
{
"status": "affected",
"version": "X8.7.1"
},
{
"status": "affected",
"version": "X8.2"
},
{
"status": "affected",
"version": "X12.5.8"
},
{
"status": "affected",
"version": "X8.7"
},
{
"status": "affected",
"version": "X8.5.2"
},
{
"status": "affected",
"version": "X12.5.9"
},
{
"status": "affected",
"version": "X12.5.0"
},
{
"status": "affected",
"version": "X8.10.4"
},
{
"status": "affected",
"version": "X8.7.2"
},
{
"status": "affected",
"version": "X12.5.5"
},
{
"status": "affected",
"version": "X12.6.1"
},
{
"status": "affected",
"version": "X12.6.2"
},
{
"status": "affected",
"version": "X12.6.3"
},
{
"status": "affected",
"version": "X12.6.4"
},
{
"status": "affected",
"version": "X12.7.0"
},
{
"status": "affected",
"version": "X12.7.1"
},
{
"status": "affected",
"version": "X14.0.0"
},
{
"status": "affected",
"version": "X14.0.1"
},
{
"status": "affected",
"version": "X14.0.2"
},
{
"status": "affected",
"version": "X14.0.3"
},
{
"status": "affected",
"version": "X14.0.4"
},
{
"status": "affected",
"version": "X14.0.5"
},
{
"status": "affected",
"version": "X14.0.6"
},
{
"status": "affected",
"version": "X14.0.7"
},
{
"status": "affected",
"version": "X14.0.8"
},
{
"status": "affected",
"version": "X14.2.0"
},
{
"status": "affected",
"version": "X14.0.9"
},
{
"status": "affected",
"version": "X14.2.1"
},
{
"status": "affected",
"version": "X14.2.2"
},
{
"status": "affected",
"version": "X14.0.11"
},
{
"status": "affected",
"version": "X14.2.5"
},
{
"status": "affected",
"version": "X14.0.10"
},
{
"status": "affected",
"version": "X14.2.6"
},
{
"status": "affected",
"version": "X14.2.7"
},
{
"status": "affected",
"version": "X14.3.0"
},
{
"status": "affected",
"version": "X14.3.1"
},
{
"status": "affected",
"version": "X14.3.2"
},
{
"status": "affected",
"version": "X14.3.3"
},
{
"status": "affected",
"version": "X15.0.0"
},
{
"status": "affected",
"version": "X14.3.4"
},
{
"status": "affected",
"version": "X14.3.5"
},
{
"status": "affected",
"version": "X15.0.1"
},
{
"status": "affected",
"version": "X15.0.2"
},
{
"status": "affected",
"version": "X15.0.3"
},
{
"status": "affected",
"version": "X14.3.6"
},
{
"status": "affected",
"version": "X15.2.0"
},
{
"status": "affected",
"version": "X15.2.1"
},
{
"status": "affected",
"version": "X15.2.2"
},
{
"status": "affected",
"version": "X15.2.3"
},
{
"status": "affected",
"version": "X14.3.7"
},
{
"status": "affected",
"version": "X15.2.4."
},
{
"status": "affected",
"version": "X15.2.4"
},
{
"status": "affected",
"version": "X15.3.0"
},
{
"status": "affected",
"version": "X15.3.1"
},
{
"status": "affected",
"version": "X15.3.2"
},
{
"status": "affected",
"version": "X15.4.0"
},
{
"status": "affected",
"version": "X15.5.0"
},
{
"status": "affected",
"version": "X15.5.1"
},
{
"status": "affected",
"version": "X15.5.2"
},
{
"status": "affected",
"version": "X15.5.3"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "As part of Cisco\u0027s ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. \u0026nbsp;\r\n\r\nThe vulnerabilities tracked by CVE-2026-76496 are related to issues concerning improper link resolutions that are grouped under the Common Weakness Enumeration (CWE) Base CWE-59."
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-59",
"description": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-21T16:18:03.087Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-exwy-hardening-FhcqBVcs",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-exwy-hardening-FhcqBVcs"
}
],
"source": {
"advisory": "cisco-sa-exwy-hardening-FhcqBVcs",
"defects": [
"CSCww67922"
],
"discovery": "INTERNAL"
},
"title": "Cisco Expressway Series Software Hardening Release: October 2026 - Improper Link Resolution Vulnerabilities"
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2026-76496",
"datePublished": "2026-10-21T16:18:03.087Z",
"dateReserved": "2026-08-19T12:02:03.640Z",
"dateUpdated": "2026-11-07T17:29:44.041Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-76495 (GCVE-0-2026-76495)
Vulnerability from cvelistv5 – Published: 2026-10-21 16:17 – Updated: 2026-11-07 17:29
VLAI
EPSS
VEX
CVE Program bundle warning
The CVE Program recognizes that this CVE Record provides vulnerability information that a Supplier CNA believes is very important to consumers. The CVE Program has flagged this CVE Record as it assigns a single CVE ID to a collection of individual vulnerabilities which does not align with CVE's "one vulnerability, one ID" principle, and therefore provides incomplete information. For further clarification, please see the CVE Program's blog, "Preserving Vulnerability-Level Identification" linked below. Details within the CNA container below are viewable by clicking on the CNA name.
https://www.cve.org/Media/News/item/blog/2026/06/…Title
Cisco Expressway Series Software Hardening Release: October 2026 - Incorrect Permission Assignment Vulnerabilities
Summary
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.
The vulnerabilities tracked by CVE-2026-76495 are related to issues concerning incorrect permission assignments that are grouped under the Common Weakness Enumeration (CWE) Variant CWE-732.
Severity
7.8 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-21 00:00 UTC
CWE
- CWE-732 - Incorrect Permission Assignment for Critical Resource
Assigner
cisco
CNA
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Cisco | Cisco TelePresence Video Communication Server (VCS) Expressway |
Affected:
X8.11.2
Affected: X8.6 Affected: X8.11.3 Affected: X8.2.2 Affected: X8.8.3 Affected: X8.11.0 Affected: X12.5.2 Affected: X8.1.1 Affected: X8.9 Affected: X12.5.1 Affected: X12.5.6 Affected: X8.7.3 Affected: X12.6.0 Affected: X8.11.1 Affected: X8.5 Affected: X8.9.1 Affected: X8.10.2 Affected: X8.8.2 Affected: X8.5.3 Affected: X8.1 Affected: X8.9.2 Affected: X8.11.4 Affected: X12.5.4 Affected: X8.8.1 Affected: X8.2.1 Affected: X8.5.1 Affected: X8.6.1 Affected: X8.1.2 Affected: X8.8 Affected: X8.10.0 Affected: X12.5.3 Affected: X8.10.1 Affected: X12.5.7 Affected: X8.10.3 Affected: X8.7.1 Affected: X8.2 Affected: X12.5.8 Affected: X8.7 Affected: X8.5.2 Affected: X12.5.9 Affected: X12.5.0 Affected: X8.10.4 Affected: X8.7.2 Affected: X12.5.5 Affected: X12.6.1 Affected: X12.6.2 Affected: X12.6.3 Affected: X12.6.4 Affected: X12.7.0 Affected: X12.7.1 Affected: X14.0.0 Affected: X14.0.1 Affected: X14.0.2 Affected: X14.0.3 Affected: X14.0.4 Affected: X14.0.5 Affected: X14.0.6 Affected: X14.0.7 Affected: X14.0.8 Affected: X14.2.0 Affected: X14.0.9 Affected: X14.2.1 Affected: X14.2.2 Affected: X14.0.11 Affected: X14.2.5 Affected: X14.0.10 Affected: X14.2.6 Affected: X14.2.7 Affected: X14.3.0 Affected: X14.3.1 Affected: X14.3.2 Affected: X14.3.3 Affected: X15.0.0 Affected: X14.3.4 Affected: X14.3.5 Affected: X15.0.1 Affected: X15.0.2 Affected: X15.0.3 Affected: X14.3.6 Affected: X15.2.0 Affected: X15.2.1 Affected: X15.2.2 Affected: X15.2.3 Affected: X14.3.7 Affected: X15.2.4. Affected: X15.2.4 Affected: X15.3.0 Affected: X15.3.1 Affected: X15.3.2 Affected: X15.4.0 Affected: X15.5.0 Affected: X15.5.1 Affected: X15.5.2 Affected: X15.5.3 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-76495",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-21T00:00:00+00:00",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-22T23:04:50.363Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"descriptions": [
{
"lang": "en",
"value": "The CVE Program recognizes that this CVE Record provides vulnerability information that a Supplier CNA believes is very important to consumers. The CVE Program has flagged this CVE Record as it assigns a single CVE ID to a collection of individual vulnerabilities which does not align with CVE\u0027s \"one vulnerability, one ID\" principle, and therefore provides incomplete information. For further clarification, please see the CVE Program\u0027s blog, \"Preserving Vulnerability-Level Identification\" linked below. Details within the CNA container below are viewable by clicking on the CNA name."
}
],
"providerMetadata": {
"dateUpdated": "2026-11-07T17:29:43.933Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"url": "https://www.cve.org/Media/News/item/blog/2026/06/16/Preserving-Vulnerability-Level-Identification"
}
],
"tags": [
"x_bundling-flagged-by-CVE-Program"
]
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Cisco TelePresence Video Communication Server (VCS) Expressway",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "X8.11.2"
},
{
"status": "affected",
"version": "X8.6"
},
{
"status": "affected",
"version": "X8.11.3"
},
{
"status": "affected",
"version": "X8.2.2"
},
{
"status": "affected",
"version": "X8.8.3"
},
{
"status": "affected",
"version": "X8.11.0"
},
{
"status": "affected",
"version": "X12.5.2"
},
{
"status": "affected",
"version": "X8.1.1"
},
{
"status": "affected",
"version": "X8.9"
},
{
"status": "affected",
"version": "X12.5.1"
},
{
"status": "affected",
"version": "X12.5.6"
},
{
"status": "affected",
"version": "X8.7.3"
},
{
"status": "affected",
"version": "X12.6.0"
},
{
"status": "affected",
"version": "X8.11.1"
},
{
"status": "affected",
"version": "X8.5"
},
{
"status": "affected",
"version": "X8.9.1"
},
{
"status": "affected",
"version": "X8.10.2"
},
{
"status": "affected",
"version": "X8.8.2"
},
{
"status": "affected",
"version": "X8.5.3"
},
{
"status": "affected",
"version": "X8.1"
},
{
"status": "affected",
"version": "X8.9.2"
},
{
"status": "affected",
"version": "X8.11.4"
},
{
"status": "affected",
"version": "X12.5.4"
},
{
"status": "affected",
"version": "X8.8.1"
},
{
"status": "affected",
"version": "X8.2.1"
},
{
"status": "affected",
"version": "X8.5.1"
},
{
"status": "affected",
"version": "X8.6.1"
},
{
"status": "affected",
"version": "X8.1.2"
},
{
"status": "affected",
"version": "X8.8"
},
{
"status": "affected",
"version": "X8.10.0"
},
{
"status": "affected",
"version": "X12.5.3"
},
{
"status": "affected",
"version": "X8.10.1"
},
{
"status": "affected",
"version": "X12.5.7"
},
{
"status": "affected",
"version": "X8.10.3"
},
{
"status": "affected",
"version": "X8.7.1"
},
{
"status": "affected",
"version": "X8.2"
},
{
"status": "affected",
"version": "X12.5.8"
},
{
"status": "affected",
"version": "X8.7"
},
{
"status": "affected",
"version": "X8.5.2"
},
{
"status": "affected",
"version": "X12.5.9"
},
{
"status": "affected",
"version": "X12.5.0"
},
{
"status": "affected",
"version": "X8.10.4"
},
{
"status": "affected",
"version": "X8.7.2"
},
{
"status": "affected",
"version": "X12.5.5"
},
{
"status": "affected",
"version": "X12.6.1"
},
{
"status": "affected",
"version": "X12.6.2"
},
{
"status": "affected",
"version": "X12.6.3"
},
{
"status": "affected",
"version": "X12.6.4"
},
{
"status": "affected",
"version": "X12.7.0"
},
{
"status": "affected",
"version": "X12.7.1"
},
{
"status": "affected",
"version": "X14.0.0"
},
{
"status": "affected",
"version": "X14.0.1"
},
{
"status": "affected",
"version": "X14.0.2"
},
{
"status": "affected",
"version": "X14.0.3"
},
{
"status": "affected",
"version": "X14.0.4"
},
{
"status": "affected",
"version": "X14.0.5"
},
{
"status": "affected",
"version": "X14.0.6"
},
{
"status": "affected",
"version": "X14.0.7"
},
{
"status": "affected",
"version": "X14.0.8"
},
{
"status": "affected",
"version": "X14.2.0"
},
{
"status": "affected",
"version": "X14.0.9"
},
{
"status": "affected",
"version": "X14.2.1"
},
{
"status": "affected",
"version": "X14.2.2"
},
{
"status": "affected",
"version": "X14.0.11"
},
{
"status": "affected",
"version": "X14.2.5"
},
{
"status": "affected",
"version": "X14.0.10"
},
{
"status": "affected",
"version": "X14.2.6"
},
{
"status": "affected",
"version": "X14.2.7"
},
{
"status": "affected",
"version": "X14.3.0"
},
{
"status": "affected",
"version": "X14.3.1"
},
{
"status": "affected",
"version": "X14.3.2"
},
{
"status": "affected",
"version": "X14.3.3"
},
{
"status": "affected",
"version": "X15.0.0"
},
{
"status": "affected",
"version": "X14.3.4"
},
{
"status": "affected",
"version": "X14.3.5"
},
{
"status": "affected",
"version": "X15.0.1"
},
{
"status": "affected",
"version": "X15.0.2"
},
{
"status": "affected",
"version": "X15.0.3"
},
{
"status": "affected",
"version": "X14.3.6"
},
{
"status": "affected",
"version": "X15.2.0"
},
{
"status": "affected",
"version": "X15.2.1"
},
{
"status": "affected",
"version": "X15.2.2"
},
{
"status": "affected",
"version": "X15.2.3"
},
{
"status": "affected",
"version": "X14.3.7"
},
{
"status": "affected",
"version": "X15.2.4."
},
{
"status": "affected",
"version": "X15.2.4"
},
{
"status": "affected",
"version": "X15.3.0"
},
{
"status": "affected",
"version": "X15.3.1"
},
{
"status": "affected",
"version": "X15.3.2"
},
{
"status": "affected",
"version": "X15.4.0"
},
{
"status": "affected",
"version": "X15.5.0"
},
{
"status": "affected",
"version": "X15.5.1"
},
{
"status": "affected",
"version": "X15.5.2"
},
{
"status": "affected",
"version": "X15.5.3"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "As part of Cisco\u0027s ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. \u0026nbsp;\r\n\r\nThe vulnerabilities tracked by CVE-2026-76495 are related to issues concerning incorrect permission assignments that are grouped under the Common Weakness Enumeration (CWE) Variant CWE-732."
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-732",
"description": "Incorrect Permission Assignment for Critical Resource",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-21T16:17:58.451Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-exwy-hardening-FhcqBVcs",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-exwy-hardening-FhcqBVcs"
}
],
"source": {
"advisory": "cisco-sa-exwy-hardening-FhcqBVcs",
"defects": [
"CSCww67926"
],
"discovery": "INTERNAL"
},
"title": "Cisco Expressway Series Software Hardening Release: October 2026 - Incorrect Permission Assignment Vulnerabilities"
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2026-76495",
"datePublished": "2026-10-21T16:17:58.451Z",
"dateReserved": "2026-08-19T12:02:03.640Z",
"dateUpdated": "2026-11-07T17:29:43.933Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-76494 (GCVE-0-2026-76494)
Vulnerability from cvelistv5 – Published: 2026-10-21 16:17 – Updated: 2026-11-07 17:29
VLAI
EPSS
VEX
CVE Program bundle warning
The CVE Program recognizes that this CVE Record provides vulnerability information that a Supplier CNA believes is very important to consumers. The CVE Program has flagged this CVE Record as it assigns a single CVE ID to a collection of individual vulnerabilities which does not align with CVE's "one vulnerability, one ID" principle, and therefore provides incomplete information. For further clarification, please see the CVE Program's blog, "Preserving Vulnerability-Level Identification" linked below. Details within the CNA container below are viewable by clicking on the CNA name.
https://www.cve.org/Media/News/item/blog/2026/06/…Title
Cisco Expressway Series Software Hardening Release: October 2026 - Code Injection Vulnerabilities
Summary
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.
The vulnerabilities tracked by CVE-2026-76494 are related to issues concerning code injections that are grouped under the Common Weakness Enumeration (CWE) Base CWE-94.
Severity
7.8 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-21 00:00 UTC
CWE
- CWE-94 - Improper Control of Generation of Code ('Code Injection')
Assigner
cisco
CNA
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Cisco | Cisco TelePresence Video Communication Server (VCS) Expressway |
Affected:
X8.11.2
Affected: X8.6 Affected: X8.11.3 Affected: X8.2.2 Affected: X8.8.3 Affected: X8.11.0 Affected: X12.5.2 Affected: X8.1.1 Affected: X8.9 Affected: X12.5.1 Affected: X12.5.6 Affected: X8.7.3 Affected: X12.6.0 Affected: X8.11.1 Affected: X8.5 Affected: X8.9.1 Affected: X8.10.2 Affected: X8.8.2 Affected: X8.5.3 Affected: X8.1 Affected: X8.9.2 Affected: X8.11.4 Affected: X12.5.4 Affected: X8.8.1 Affected: X8.2.1 Affected: X8.5.1 Affected: X8.6.1 Affected: X8.1.2 Affected: X8.8 Affected: X8.10.0 Affected: X12.5.3 Affected: X8.10.1 Affected: X12.5.7 Affected: X8.10.3 Affected: X8.7.1 Affected: X8.2 Affected: X12.5.8 Affected: X8.7 Affected: X8.5.2 Affected: X12.5.9 Affected: X12.5.0 Affected: X8.10.4 Affected: X8.7.2 Affected: X12.5.5 Affected: X12.6.1 Affected: X12.6.2 Affected: X12.6.3 Affected: X12.6.4 Affected: X12.7.0 Affected: X12.7.1 Affected: X14.0.0 Affected: X14.0.1 Affected: X14.0.2 Affected: X14.0.3 Affected: X14.0.4 Affected: X14.0.5 Affected: X14.0.6 Affected: X14.0.7 Affected: X14.0.8 Affected: X14.2.0 Affected: X14.0.9 Affected: X14.2.1 Affected: X14.2.2 Affected: X14.0.11 Affected: X14.2.5 Affected: X14.0.10 Affected: X14.2.6 Affected: X14.2.7 Affected: X14.3.0 Affected: X14.3.1 Affected: X14.3.2 Affected: X14.3.3 Affected: X15.0.0 Affected: X14.3.4 Affected: X14.3.5 Affected: X15.0.1 Affected: X15.0.2 Affected: X15.0.3 Affected: X14.3.6 Affected: X15.2.0 Affected: X15.2.1 Affected: X15.2.2 Affected: X15.2.3 Affected: X14.3.7 Affected: X15.2.4. Affected: X15.2.4 Affected: X15.3.0 Affected: X15.3.1 Affected: X15.3.2 Affected: X15.4.0 Affected: X15.5.0 Affected: X15.5.1 Affected: X15.5.2 Affected: X15.5.3 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-76494",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-21T00:00:00+00:00",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-22T23:04:49.560Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"descriptions": [
{
"lang": "en",
"value": "The CVE Program recognizes that this CVE Record provides vulnerability information that a Supplier CNA believes is very important to consumers. The CVE Program has flagged this CVE Record as it assigns a single CVE ID to a collection of individual vulnerabilities which does not align with CVE\u0027s \"one vulnerability, one ID\" principle, and therefore provides incomplete information. For further clarification, please see the CVE Program\u0027s blog, \"Preserving Vulnerability-Level Identification\" linked below. Details within the CNA container below are viewable by clicking on the CNA name."
}
],
"providerMetadata": {
"dateUpdated": "2026-11-07T17:29:43.817Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"url": "https://www.cve.org/Media/News/item/blog/2026/06/16/Preserving-Vulnerability-Level-Identification"
}
],
"tags": [
"x_bundling-flagged-by-CVE-Program"
]
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Cisco TelePresence Video Communication Server (VCS) Expressway",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "X8.11.2"
},
{
"status": "affected",
"version": "X8.6"
},
{
"status": "affected",
"version": "X8.11.3"
},
{
"status": "affected",
"version": "X8.2.2"
},
{
"status": "affected",
"version": "X8.8.3"
},
{
"status": "affected",
"version": "X8.11.0"
},
{
"status": "affected",
"version": "X12.5.2"
},
{
"status": "affected",
"version": "X8.1.1"
},
{
"status": "affected",
"version": "X8.9"
},
{
"status": "affected",
"version": "X12.5.1"
},
{
"status": "affected",
"version": "X12.5.6"
},
{
"status": "affected",
"version": "X8.7.3"
},
{
"status": "affected",
"version": "X12.6.0"
},
{
"status": "affected",
"version": "X8.11.1"
},
{
"status": "affected",
"version": "X8.5"
},
{
"status": "affected",
"version": "X8.9.1"
},
{
"status": "affected",
"version": "X8.10.2"
},
{
"status": "affected",
"version": "X8.8.2"
},
{
"status": "affected",
"version": "X8.5.3"
},
{
"status": "affected",
"version": "X8.1"
},
{
"status": "affected",
"version": "X8.9.2"
},
{
"status": "affected",
"version": "X8.11.4"
},
{
"status": "affected",
"version": "X12.5.4"
},
{
"status": "affected",
"version": "X8.8.1"
},
{
"status": "affected",
"version": "X8.2.1"
},
{
"status": "affected",
"version": "X8.5.1"
},
{
"status": "affected",
"version": "X8.6.1"
},
{
"status": "affected",
"version": "X8.1.2"
},
{
"status": "affected",
"version": "X8.8"
},
{
"status": "affected",
"version": "X8.10.0"
},
{
"status": "affected",
"version": "X12.5.3"
},
{
"status": "affected",
"version": "X8.10.1"
},
{
"status": "affected",
"version": "X12.5.7"
},
{
"status": "affected",
"version": "X8.10.3"
},
{
"status": "affected",
"version": "X8.7.1"
},
{
"status": "affected",
"version": "X8.2"
},
{
"status": "affected",
"version": "X12.5.8"
},
{
"status": "affected",
"version": "X8.7"
},
{
"status": "affected",
"version": "X8.5.2"
},
{
"status": "affected",
"version": "X12.5.9"
},
{
"status": "affected",
"version": "X12.5.0"
},
{
"status": "affected",
"version": "X8.10.4"
},
{
"status": "affected",
"version": "X8.7.2"
},
{
"status": "affected",
"version": "X12.5.5"
},
{
"status": "affected",
"version": "X12.6.1"
},
{
"status": "affected",
"version": "X12.6.2"
},
{
"status": "affected",
"version": "X12.6.3"
},
{
"status": "affected",
"version": "X12.6.4"
},
{
"status": "affected",
"version": "X12.7.0"
},
{
"status": "affected",
"version": "X12.7.1"
},
{
"status": "affected",
"version": "X14.0.0"
},
{
"status": "affected",
"version": "X14.0.1"
},
{
"status": "affected",
"version": "X14.0.2"
},
{
"status": "affected",
"version": "X14.0.3"
},
{
"status": "affected",
"version": "X14.0.4"
},
{
"status": "affected",
"version": "X14.0.5"
},
{
"status": "affected",
"version": "X14.0.6"
},
{
"status": "affected",
"version": "X14.0.7"
},
{
"status": "affected",
"version": "X14.0.8"
},
{
"status": "affected",
"version": "X14.2.0"
},
{
"status": "affected",
"version": "X14.0.9"
},
{
"status": "affected",
"version": "X14.2.1"
},
{
"status": "affected",
"version": "X14.2.2"
},
{
"status": "affected",
"version": "X14.0.11"
},
{
"status": "affected",
"version": "X14.2.5"
},
{
"status": "affected",
"version": "X14.0.10"
},
{
"status": "affected",
"version": "X14.2.6"
},
{
"status": "affected",
"version": "X14.2.7"
},
{
"status": "affected",
"version": "X14.3.0"
},
{
"status": "affected",
"version": "X14.3.1"
},
{
"status": "affected",
"version": "X14.3.2"
},
{
"status": "affected",
"version": "X14.3.3"
},
{
"status": "affected",
"version": "X15.0.0"
},
{
"status": "affected",
"version": "X14.3.4"
},
{
"status": "affected",
"version": "X14.3.5"
},
{
"status": "affected",
"version": "X15.0.1"
},
{
"status": "affected",
"version": "X15.0.2"
},
{
"status": "affected",
"version": "X15.0.3"
},
{
"status": "affected",
"version": "X14.3.6"
},
{
"status": "affected",
"version": "X15.2.0"
},
{
"status": "affected",
"version": "X15.2.1"
},
{
"status": "affected",
"version": "X15.2.2"
},
{
"status": "affected",
"version": "X15.2.3"
},
{
"status": "affected",
"version": "X14.3.7"
},
{
"status": "affected",
"version": "X15.2.4."
},
{
"status": "affected",
"version": "X15.2.4"
},
{
"status": "affected",
"version": "X15.3.0"
},
{
"status": "affected",
"version": "X15.3.1"
},
{
"status": "affected",
"version": "X15.3.2"
},
{
"status": "affected",
"version": "X15.4.0"
},
{
"status": "affected",
"version": "X15.5.0"
},
{
"status": "affected",
"version": "X15.5.1"
},
{
"status": "affected",
"version": "X15.5.2"
},
{
"status": "affected",
"version": "X15.5.3"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "As part of Cisco\u0027s ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. \u0026nbsp;\r\n\r\nThe vulnerabilities tracked by CVE-2026-76494 are related to issues concerning code injections that are grouped under the Common Weakness Enumeration (CWE) Base CWE-94."
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-94",
"description": "Improper Control of Generation of Code (\u0027Code Injection\u0027)",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-21T16:17:44.657Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-exwy-hardening-FhcqBVcs",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-exwy-hardening-FhcqBVcs"
}
],
"source": {
"advisory": "cisco-sa-exwy-hardening-FhcqBVcs",
"defects": [
"CSCww67925"
],
"discovery": "INTERNAL"
},
"title": "Cisco Expressway Series Software Hardening Release: October 2026 - Code Injection Vulnerabilities"
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2026-76494",
"datePublished": "2026-10-21T16:17:44.657Z",
"dateReserved": "2026-08-19T12:02:03.640Z",
"dateUpdated": "2026-11-07T17:29:43.817Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-76493 (GCVE-0-2026-76493)
Vulnerability from cvelistv5 – Published: 2026-10-21 16:17 – Updated: 2026-11-07 17:29
VLAI
EPSS
VEX
CVE Program bundle warning
The CVE Program recognizes that this CVE Record provides vulnerability information that a Supplier CNA believes is very important to consumers. The CVE Program has flagged this CVE Record as it assigns a single CVE ID to a collection of individual vulnerabilities which does not align with CVE's "one vulnerability, one ID" principle, and therefore provides incomplete information. For further clarification, please see the CVE Program's blog, "Preserving Vulnerability-Level Identification" linked below. Details within the CNA container below are viewable by clicking on the CNA name.
https://www.cve.org/Media/News/item/blog/2026/06/…Title
Cisco Expressway Series Software Hardening Release: October 2026 - Uncaught Exception Vulnerabilities
Summary
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.
The vulnerabilities tracked by CVE-2026-76493 are related to issues concerning uncaught exceptions that are grouped under the Common Weakness Enumeration (CWE) Base CWE-248.
Severity
7.5 (High)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-21 17:14 UTC
CWE
- CWE-248 - Uncaught Exception
Assigner
cisco
CNA
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Cisco | Cisco TelePresence Video Communication Server (VCS) Expressway |
Affected:
X8.11.2
Affected: X8.6 Affected: X8.11.3 Affected: X8.2.2 Affected: X8.8.3 Affected: X8.11.0 Affected: X12.5.2 Affected: X8.1.1 Affected: X8.9 Affected: X12.5.1 Affected: X12.5.6 Affected: X8.7.3 Affected: X12.6.0 Affected: X8.11.1 Affected: X8.5 Affected: X8.9.1 Affected: X8.10.2 Affected: X8.8.2 Affected: X8.5.3 Affected: X8.1 Affected: X8.9.2 Affected: X8.11.4 Affected: X12.5.4 Affected: X8.8.1 Affected: X8.2.1 Affected: X8.5.1 Affected: X8.6.1 Affected: X8.1.2 Affected: X8.8 Affected: X8.10.0 Affected: X12.5.3 Affected: X8.10.1 Affected: X12.5.7 Affected: X8.10.3 Affected: X8.7.1 Affected: X8.2 Affected: X12.5.8 Affected: X8.7 Affected: X8.5.2 Affected: X12.5.9 Affected: X12.5.0 Affected: X8.10.4 Affected: X8.7.2 Affected: X12.5.5 Affected: X12.6.1 Affected: X12.6.2 Affected: X12.6.3 Affected: X12.6.4 Affected: X12.7.0 Affected: X12.7.1 Affected: X14.0.0 Affected: X14.0.1 Affected: X14.0.2 Affected: X14.0.3 Affected: X14.0.4 Affected: X14.0.5 Affected: X14.0.6 Affected: X14.0.7 Affected: X14.0.8 Affected: X14.2.0 Affected: X14.0.9 Affected: X14.2.1 Affected: X14.2.2 Affected: X14.0.11 Affected: X14.2.5 Affected: X14.0.10 Affected: X14.2.6 Affected: X14.2.7 Affected: X14.3.0 Affected: X14.3.1 Affected: X14.3.2 Affected: X14.3.3 Affected: X15.0.0 Affected: X14.3.4 Affected: X14.3.5 Affected: X15.0.1 Affected: X15.0.2 Affected: X15.0.3 Affected: X14.3.6 Affected: X15.2.0 Affected: X15.2.1 Affected: X15.2.2 Affected: X15.2.3 Affected: X14.3.7 Affected: X15.2.4. Affected: X15.2.4 Affected: X15.3.0 Affected: X15.3.1 Affected: X15.3.2 Affected: X15.4.0 Affected: X15.5.0 Affected: X15.5.1 Affected: X15.5.2 Affected: X15.5.3 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-76493",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-21T17:14:24.690060Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-22T13:37:52.649Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"descriptions": [
{
"lang": "en",
"value": "The CVE Program recognizes that this CVE Record provides vulnerability information that a Supplier CNA believes is very important to consumers. The CVE Program has flagged this CVE Record as it assigns a single CVE ID to a collection of individual vulnerabilities which does not align with CVE\u0027s \"one vulnerability, one ID\" principle, and therefore provides incomplete information. For further clarification, please see the CVE Program\u0027s blog, \"Preserving Vulnerability-Level Identification\" linked below. Details within the CNA container below are viewable by clicking on the CNA name."
}
],
"providerMetadata": {
"dateUpdated": "2026-11-07T17:29:43.692Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"url": "https://www.cve.org/Media/News/item/blog/2026/06/16/Preserving-Vulnerability-Level-Identification"
}
],
"tags": [
"x_bundling-flagged-by-CVE-Program"
]
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Cisco TelePresence Video Communication Server (VCS) Expressway",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "X8.11.2"
},
{
"status": "affected",
"version": "X8.6"
},
{
"status": "affected",
"version": "X8.11.3"
},
{
"status": "affected",
"version": "X8.2.2"
},
{
"status": "affected",
"version": "X8.8.3"
},
{
"status": "affected",
"version": "X8.11.0"
},
{
"status": "affected",
"version": "X12.5.2"
},
{
"status": "affected",
"version": "X8.1.1"
},
{
"status": "affected",
"version": "X8.9"
},
{
"status": "affected",
"version": "X12.5.1"
},
{
"status": "affected",
"version": "X12.5.6"
},
{
"status": "affected",
"version": "X8.7.3"
},
{
"status": "affected",
"version": "X12.6.0"
},
{
"status": "affected",
"version": "X8.11.1"
},
{
"status": "affected",
"version": "X8.5"
},
{
"status": "affected",
"version": "X8.9.1"
},
{
"status": "affected",
"version": "X8.10.2"
},
{
"status": "affected",
"version": "X8.8.2"
},
{
"status": "affected",
"version": "X8.5.3"
},
{
"status": "affected",
"version": "X8.1"
},
{
"status": "affected",
"version": "X8.9.2"
},
{
"status": "affected",
"version": "X8.11.4"
},
{
"status": "affected",
"version": "X12.5.4"
},
{
"status": "affected",
"version": "X8.8.1"
},
{
"status": "affected",
"version": "X8.2.1"
},
{
"status": "affected",
"version": "X8.5.1"
},
{
"status": "affected",
"version": "X8.6.1"
},
{
"status": "affected",
"version": "X8.1.2"
},
{
"status": "affected",
"version": "X8.8"
},
{
"status": "affected",
"version": "X8.10.0"
},
{
"status": "affected",
"version": "X12.5.3"
},
{
"status": "affected",
"version": "X8.10.1"
},
{
"status": "affected",
"version": "X12.5.7"
},
{
"status": "affected",
"version": "X8.10.3"
},
{
"status": "affected",
"version": "X8.7.1"
},
{
"status": "affected",
"version": "X8.2"
},
{
"status": "affected",
"version": "X12.5.8"
},
{
"status": "affected",
"version": "X8.7"
},
{
"status": "affected",
"version": "X8.5.2"
},
{
"status": "affected",
"version": "X12.5.9"
},
{
"status": "affected",
"version": "X12.5.0"
},
{
"status": "affected",
"version": "X8.10.4"
},
{
"status": "affected",
"version": "X8.7.2"
},
{
"status": "affected",
"version": "X12.5.5"
},
{
"status": "affected",
"version": "X12.6.1"
},
{
"status": "affected",
"version": "X12.6.2"
},
{
"status": "affected",
"version": "X12.6.3"
},
{
"status": "affected",
"version": "X12.6.4"
},
{
"status": "affected",
"version": "X12.7.0"
},
{
"status": "affected",
"version": "X12.7.1"
},
{
"status": "affected",
"version": "X14.0.0"
},
{
"status": "affected",
"version": "X14.0.1"
},
{
"status": "affected",
"version": "X14.0.2"
},
{
"status": "affected",
"version": "X14.0.3"
},
{
"status": "affected",
"version": "X14.0.4"
},
{
"status": "affected",
"version": "X14.0.5"
},
{
"status": "affected",
"version": "X14.0.6"
},
{
"status": "affected",
"version": "X14.0.7"
},
{
"status": "affected",
"version": "X14.0.8"
},
{
"status": "affected",
"version": "X14.2.0"
},
{
"status": "affected",
"version": "X14.0.9"
},
{
"status": "affected",
"version": "X14.2.1"
},
{
"status": "affected",
"version": "X14.2.2"
},
{
"status": "affected",
"version": "X14.0.11"
},
{
"status": "affected",
"version": "X14.2.5"
},
{
"status": "affected",
"version": "X14.0.10"
},
{
"status": "affected",
"version": "X14.2.6"
},
{
"status": "affected",
"version": "X14.2.7"
},
{
"status": "affected",
"version": "X14.3.0"
},
{
"status": "affected",
"version": "X14.3.1"
},
{
"status": "affected",
"version": "X14.3.2"
},
{
"status": "affected",
"version": "X14.3.3"
},
{
"status": "affected",
"version": "X15.0.0"
},
{
"status": "affected",
"version": "X14.3.4"
},
{
"status": "affected",
"version": "X14.3.5"
},
{
"status": "affected",
"version": "X15.0.1"
},
{
"status": "affected",
"version": "X15.0.2"
},
{
"status": "affected",
"version": "X15.0.3"
},
{
"status": "affected",
"version": "X14.3.6"
},
{
"status": "affected",
"version": "X15.2.0"
},
{
"status": "affected",
"version": "X15.2.1"
},
{
"status": "affected",
"version": "X15.2.2"
},
{
"status": "affected",
"version": "X15.2.3"
},
{
"status": "affected",
"version": "X14.3.7"
},
{
"status": "affected",
"version": "X15.2.4."
},
{
"status": "affected",
"version": "X15.2.4"
},
{
"status": "affected",
"version": "X15.3.0"
},
{
"status": "affected",
"version": "X15.3.1"
},
{
"status": "affected",
"version": "X15.3.2"
},
{
"status": "affected",
"version": "X15.4.0"
},
{
"status": "affected",
"version": "X15.5.0"
},
{
"status": "affected",
"version": "X15.5.1"
},
{
"status": "affected",
"version": "X15.5.2"
},
{
"status": "affected",
"version": "X15.5.3"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "As part of Cisco\u0027s ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. \u0026nbsp;\r\n\r\nThe vulnerabilities tracked by CVE-2026-76493 are related to issues concerning uncaught exceptions that are grouped under the Common Weakness Enumeration (CWE) Base CWE-248."
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-248",
"description": "Uncaught Exception",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-21T16:17:34.243Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-exwy-hardening-FhcqBVcs",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-exwy-hardening-FhcqBVcs"
}
],
"source": {
"advisory": "cisco-sa-exwy-hardening-FhcqBVcs",
"defects": [
"CSCww67921"
],
"discovery": "INTERNAL"
},
"title": "Cisco Expressway Series Software Hardening Release: October 2026 - Uncaught Exception Vulnerabilities"
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2026-76493",
"datePublished": "2026-10-21T16:17:34.243Z",
"dateReserved": "2026-08-19T12:02:03.640Z",
"dateUpdated": "2026-11-07T17:29:43.692Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-76490 (GCVE-0-2026-76490)
Vulnerability from cvelistv5 – Published: 2026-10-21 16:17 – Updated: 2026-11-07 17:29
VLAI
EPSS
VEX
CVE Program bundle warning
The CVE Program recognizes that this CVE Record provides vulnerability information that a Supplier CNA believes is very important to consumers. The CVE Program has flagged this CVE Record as it assigns a single CVE ID to a collection of individual vulnerabilities which does not align with CVE's "one vulnerability, one ID" principle, and therefore provides incomplete information. For further clarification, please see the CVE Program's blog, "Preserving Vulnerability-Level Identification" linked below. Details within the CNA container below are viewable by clicking on the CNA name.
https://www.cve.org/Media/News/item/blog/2026/06/…Title
Cisco Expressway Series Software Hardening Release: October 2026 - Out-of-bounds Write Vulnerabilities
Summary
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.
The vulnerabilities tracked by CVE-2026-76490 are related to issues concerning out-of-bounds writes that are grouped under the Common Weakness Enumeration (CWE) Base CWE-787.
Severity
8.6 (High)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-21 17:14 UTC
CWE
- CWE-787 - Out-of-bounds Write
Assigner
cisco
CNA
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Cisco | Cisco TelePresence Video Communication Server (VCS) Expressway |
Affected:
X8.11.2
Affected: X8.6 Affected: X8.11.3 Affected: X8.2.2 Affected: X8.8.3 Affected: X8.11.0 Affected: X12.5.2 Affected: X8.1.1 Affected: X8.9 Affected: X12.5.1 Affected: X12.5.6 Affected: X8.7.3 Affected: X12.6.0 Affected: X8.11.1 Affected: X8.5 Affected: X8.9.1 Affected: X8.10.2 Affected: X8.8.2 Affected: X8.5.3 Affected: X8.1 Affected: X8.9.2 Affected: X8.11.4 Affected: X12.5.4 Affected: X8.8.1 Affected: X8.2.1 Affected: X8.5.1 Affected: X8.6.1 Affected: X8.1.2 Affected: X8.8 Affected: X8.10.0 Affected: X12.5.3 Affected: X8.10.1 Affected: X12.5.7 Affected: X8.10.3 Affected: X8.7.1 Affected: X8.2 Affected: X12.5.8 Affected: X8.7 Affected: X8.5.2 Affected: X12.5.9 Affected: X12.5.0 Affected: X8.10.4 Affected: X8.7.2 Affected: X12.5.5 Affected: X12.6.1 Affected: X12.6.2 Affected: X12.6.3 Affected: X12.6.4 Affected: X12.7.0 Affected: X12.7.1 Affected: X14.0.0 Affected: X14.0.1 Affected: X14.0.2 Affected: X14.0.3 Affected: X14.0.4 Affected: X14.0.5 Affected: X14.0.6 Affected: X14.0.7 Affected: X14.0.8 Affected: X14.2.0 Affected: X14.0.9 Affected: X14.2.1 Affected: X14.2.2 Affected: X14.0.11 Affected: X14.2.5 Affected: X14.0.10 Affected: X14.2.6 Affected: X14.2.7 Affected: X14.3.0 Affected: X14.3.1 Affected: X14.3.2 Affected: X14.3.3 Affected: X15.0.0 Affected: X14.3.4 Affected: X14.3.5 Affected: X15.0.1 Affected: X15.0.2 Affected: X15.0.3 Affected: X14.3.6 Affected: X15.2.0 Affected: X15.2.1 Affected: X15.2.2 Affected: X15.2.3 Affected: X14.3.7 Affected: X15.2.4. Affected: X15.2.4 Affected: X15.3.0 Affected: X15.3.1 Affected: X15.3.2 Affected: X15.4.0 Affected: X15.5.0 Affected: X15.5.1 Affected: X15.5.2 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-76490",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-21T17:14:36.090879Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-22T13:37:52.794Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"descriptions": [
{
"lang": "en",
"value": "The CVE Program recognizes that this CVE Record provides vulnerability information that a Supplier CNA believes is very important to consumers. The CVE Program has flagged this CVE Record as it assigns a single CVE ID to a collection of individual vulnerabilities which does not align with CVE\u0027s \"one vulnerability, one ID\" principle, and therefore provides incomplete information. For further clarification, please see the CVE Program\u0027s blog, \"Preserving Vulnerability-Level Identification\" linked below. Details within the CNA container below are viewable by clicking on the CNA name."
}
],
"providerMetadata": {
"dateUpdated": "2026-11-07T17:29:43.355Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"url": "https://www.cve.org/Media/News/item/blog/2026/06/16/Preserving-Vulnerability-Level-Identification"
}
],
"tags": [
"x_bundling-flagged-by-CVE-Program"
]
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Cisco TelePresence Video Communication Server (VCS) Expressway",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "X8.11.2"
},
{
"status": "affected",
"version": "X8.6"
},
{
"status": "affected",
"version": "X8.11.3"
},
{
"status": "affected",
"version": "X8.2.2"
},
{
"status": "affected",
"version": "X8.8.3"
},
{
"status": "affected",
"version": "X8.11.0"
},
{
"status": "affected",
"version": "X12.5.2"
},
{
"status": "affected",
"version": "X8.1.1"
},
{
"status": "affected",
"version": "X8.9"
},
{
"status": "affected",
"version": "X12.5.1"
},
{
"status": "affected",
"version": "X12.5.6"
},
{
"status": "affected",
"version": "X8.7.3"
},
{
"status": "affected",
"version": "X12.6.0"
},
{
"status": "affected",
"version": "X8.11.1"
},
{
"status": "affected",
"version": "X8.5"
},
{
"status": "affected",
"version": "X8.9.1"
},
{
"status": "affected",
"version": "X8.10.2"
},
{
"status": "affected",
"version": "X8.8.2"
},
{
"status": "affected",
"version": "X8.5.3"
},
{
"status": "affected",
"version": "X8.1"
},
{
"status": "affected",
"version": "X8.9.2"
},
{
"status": "affected",
"version": "X8.11.4"
},
{
"status": "affected",
"version": "X12.5.4"
},
{
"status": "affected",
"version": "X8.8.1"
},
{
"status": "affected",
"version": "X8.2.1"
},
{
"status": "affected",
"version": "X8.5.1"
},
{
"status": "affected",
"version": "X8.6.1"
},
{
"status": "affected",
"version": "X8.1.2"
},
{
"status": "affected",
"version": "X8.8"
},
{
"status": "affected",
"version": "X8.10.0"
},
{
"status": "affected",
"version": "X12.5.3"
},
{
"status": "affected",
"version": "X8.10.1"
},
{
"status": "affected",
"version": "X12.5.7"
},
{
"status": "affected",
"version": "X8.10.3"
},
{
"status": "affected",
"version": "X8.7.1"
},
{
"status": "affected",
"version": "X8.2"
},
{
"status": "affected",
"version": "X12.5.8"
},
{
"status": "affected",
"version": "X8.7"
},
{
"status": "affected",
"version": "X8.5.2"
},
{
"status": "affected",
"version": "X12.5.9"
},
{
"status": "affected",
"version": "X12.5.0"
},
{
"status": "affected",
"version": "X8.10.4"
},
{
"status": "affected",
"version": "X8.7.2"
},
{
"status": "affected",
"version": "X12.5.5"
},
{
"status": "affected",
"version": "X12.6.1"
},
{
"status": "affected",
"version": "X12.6.2"
},
{
"status": "affected",
"version": "X12.6.3"
},
{
"status": "affected",
"version": "X12.6.4"
},
{
"status": "affected",
"version": "X12.7.0"
},
{
"status": "affected",
"version": "X12.7.1"
},
{
"status": "affected",
"version": "X14.0.0"
},
{
"status": "affected",
"version": "X14.0.1"
},
{
"status": "affected",
"version": "X14.0.2"
},
{
"status": "affected",
"version": "X14.0.3"
},
{
"status": "affected",
"version": "X14.0.4"
},
{
"status": "affected",
"version": "X14.0.5"
},
{
"status": "affected",
"version": "X14.0.6"
},
{
"status": "affected",
"version": "X14.0.7"
},
{
"status": "affected",
"version": "X14.0.8"
},
{
"status": "affected",
"version": "X14.2.0"
},
{
"status": "affected",
"version": "X14.0.9"
},
{
"status": "affected",
"version": "X14.2.1"
},
{
"status": "affected",
"version": "X14.2.2"
},
{
"status": "affected",
"version": "X14.0.11"
},
{
"status": "affected",
"version": "X14.2.5"
},
{
"status": "affected",
"version": "X14.0.10"
},
{
"status": "affected",
"version": "X14.2.6"
},
{
"status": "affected",
"version": "X14.2.7"
},
{
"status": "affected",
"version": "X14.3.0"
},
{
"status": "affected",
"version": "X14.3.1"
},
{
"status": "affected",
"version": "X14.3.2"
},
{
"status": "affected",
"version": "X14.3.3"
},
{
"status": "affected",
"version": "X15.0.0"
},
{
"status": "affected",
"version": "X14.3.4"
},
{
"status": "affected",
"version": "X14.3.5"
},
{
"status": "affected",
"version": "X15.0.1"
},
{
"status": "affected",
"version": "X15.0.2"
},
{
"status": "affected",
"version": "X15.0.3"
},
{
"status": "affected",
"version": "X14.3.6"
},
{
"status": "affected",
"version": "X15.2.0"
},
{
"status": "affected",
"version": "X15.2.1"
},
{
"status": "affected",
"version": "X15.2.2"
},
{
"status": "affected",
"version": "X15.2.3"
},
{
"status": "affected",
"version": "X14.3.7"
},
{
"status": "affected",
"version": "X15.2.4."
},
{
"status": "affected",
"version": "X15.2.4"
},
{
"status": "affected",
"version": "X15.3.0"
},
{
"status": "affected",
"version": "X15.3.1"
},
{
"status": "affected",
"version": "X15.3.2"
},
{
"status": "affected",
"version": "X15.4.0"
},
{
"status": "affected",
"version": "X15.5.0"
},
{
"status": "affected",
"version": "X15.5.1"
},
{
"status": "affected",
"version": "X15.5.2"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "As part of Cisco\u0027s ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. \u0026nbsp;\r\n\r\nThe vulnerabilities tracked by CVE-2026-76490 are related to issues concerning out-of-bounds writes that are grouped under the Common Weakness Enumeration (CWE) Base CWE-787."
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-787",
"description": "Out-of-bounds Write",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-21T16:17:29.557Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-exwy-hardening-FhcqBVcs",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-exwy-hardening-FhcqBVcs"
}
],
"source": {
"advisory": "cisco-sa-exwy-hardening-FhcqBVcs",
"defects": [
"CSCww67928"
],
"discovery": "INTERNAL"
},
"title": "Cisco Expressway Series Software Hardening Release: October 2026 - Out-of-bounds Write Vulnerabilities"
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2026-76490",
"datePublished": "2026-10-21T16:17:29.557Z",
"dateReserved": "2026-08-19T12:02:03.640Z",
"dateUpdated": "2026-11-07T17:29:43.355Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-76489 (GCVE-0-2026-76489)
Vulnerability from cvelistv5 – Published: 2026-10-21 16:17 – Updated: 2026-10-22 19:11
VLAI
EPSS
VEX
Title
Multiple Cisco Products Snort 3 Generic File Processing Memory Exhaustion Denial of Service Vulnerability
Summary
Multiple Cisco products are affected by a vulnerability in the memory management implementation of Snort 3 that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption of packet inspection.
This vulnerability is due to incomplete error checking when Snort 3 processes files, which could cause unreleased memory. An attacker could exploit this vulnerability by sending a large number of files to be processed. A successful exploit could allow the attacker to cause the Snort 3 Detection Engine to restart unexpectedly, resulting in a DoS condition.
Severity
5.8 (Medium)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-21 17:14 UTC
CWE
- CWE-401 - Missing Release of Memory after Effective Lifetime
Assigner
cisco
CNA
References
1 reference
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Cisco | Cisco Open Source Snort3 |
Affected:
3.12.2.0
Affected: 3.1.2.0 Affected: 3.1.3.0 Affected: 3.1.4.0 Affected: 3.1.5.0 Affected: 3.1.6.0 Affected: 3.1.7.0 Affected: 3.1.8.0 Affected: 3.1.9.0 Affected: 3.1.10.0 Affected: 3.1.12.0 Affected: 3.1.13.0 Affected: 3.1.14.0 Affected: 3.1.15.0 Affected: 3.1.16.0 Affected: 3.1.17.0 Affected: 3.1.18.0 Affected: 3.1.19.0 Affected: 3.1.20.0 Affected: 3.1.21.0 Affected: 3.1.22.0 Affected: 3.1.23.0 Affected: 3.1.24.0 Affected: 3.1.25.0 Affected: 3.1.27.0 Affected: 3.1.28.0 Affected: 3.1.29.0 Affected: 3.1.30.0 Affected: 3.1.31.0 Affected: 3.1.32.0 Affected: 3.1.36.0 Affected: 3.1.38.0 Affected: 3.1.39.0 Affected: 3.1.40.0 Affected: 3.1.41.0 Affected: 3.1.42.0 Affected: 3.1.43.0 Affected: 3.1.45.0 Affected: 3.1.47.0 Affected: 3.1.48.0 Affected: 3.1.50.0 Affected: 3.1.51.0 Affected: 3.1.52.0 Affected: 3.1.53.0 Affected: 3.1.55.0 Affected: 3.1.56.0 Affected: 3.1.57.0 Affected: 3.1.58.0 Affected: 3.1.59.0 Affected: 3.1.60.0 Affected: 3.1.61.0 Affected: 3.1.62.0 Affected: 3.1.63.0 Affected: 3.1.64.0 Affected: 3.1.65.0 Affected: 3.1.66.0 Affected: 3.1.67.0 Affected: 3.1.69.0 Affected: 3.1.70.0 Affected: 3.1.71.0 Affected: 3.1.72.0 Affected: 3.1.73.0 Affected: 3.1.74.0 Affected: 3.1.75.0 Affected: 3.1.76.0 Affected: 3.1.77.0 Affected: 3.1.78.0 Affected: 3.1.81.0 Affected: 3.1.82.0 Affected: 3.1.83.0 Affected: 3.1.84.0 Affected: 3.2.1.0 Affected: 3.2.2.0 Affected: 3.3.0.0 Affected: 3.3.1.0 Affected: 3.3.2.0 Affected: 3.3.3.0 Affected: 3.3.4.0 Affected: 3.3.5.0 Affected: 3.3.7.0 Affected: 3.5.0.0 Affected: 3.5.1.0 Affected: 3.8.1.0 Affected: 3.6.0.0 Affected: 3.6.2.0 Affected: 3.9.3.0 Affected: 3.7.2.0 Affected: 3.7.0.0 Affected: 3.9.6.0 Affected: 3.10.0.0 Affected: 3.10.2.0 Affected: 3.7.4.0 Affected: 3.9.0.0 Affected: 3.5.2.0 Affected: 3.12.1.0 Affected: 3.6.1.0 Affected: 3.9.2.0 Affected: 3.6.3.0 Affected: 3.9.5.0 Affected: 3.7.1.0 Affected: 3.9.7.0 Affected: 3.7.3.0 Affected: 3.10.1.0 Affected: 3.9.1.0 Affected: 3.11.1.0 |
|
| Cisco | Cisco Secure Firewall Threat Defense (FTD) Software |
Affected:
7.0.0
Affected: 7.0.0.1 Affected: 7.0.1 Affected: 7.0.1.1 Affected: 7.0.2 Affected: 7.2.0 Affected: 7.0.2.1 Affected: 7.0.3 Affected: 7.2.0.1 Affected: 7.0.4 Affected: 7.2.1 Affected: 7.0.5 Affected: 7.3.0 Affected: 7.2.2 Affected: 7.2.3 Affected: 7.3.1 Affected: 7.2.4 Affected: 7.0.6 Affected: 7.2.5 Affected: 7.2.4.1 Affected: 7.3.1.1 Affected: 7.4.0 Affected: 7.0.6.1 Affected: 7.2.5.1 Affected: 7.4.1 Affected: 7.2.6 Affected: 7.0.6.2 Affected: 7.4.1.1 Affected: 7.2.7 Affected: 7.2.5.2 Affected: 7.3.1.2 Affected: 7.2.8 Affected: 7.6.0 Affected: 7.4.2 Affected: 7.2.8.1 Affected: 7.0.6.3 Affected: 7.4.2.1 Affected: 7.2.9 Affected: 7.0.7 Affected: 7.7.0 Affected: 7.4.2.2 Affected: 7.6.1 Affected: 7.4.2.3 Affected: 7.0.8 Affected: 7.6.2 Affected: 7.7.10 Affected: 7.7.11 Affected: 7.0.8.1 Affected: 7.6.2.1 Affected: 7.7.10.1 Affected: 7.4.2.4 Affected: 7.4.3 Affected: 7.6.4 Affected: 10.0.0 Affected: 7.4.4 Affected: 7.0.9 Affected: 7.4.7 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-76489",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-21T17:14:49.074914Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-22T13:37:52.954Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Cisco Open Source Snort3",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "3.12.2.0"
},
{
"status": "affected",
"version": "3.1.2.0"
},
{
"status": "affected",
"version": "3.1.3.0"
},
{
"status": "affected",
"version": "3.1.4.0"
},
{
"status": "affected",
"version": "3.1.5.0"
},
{
"status": "affected",
"version": "3.1.6.0"
},
{
"status": "affected",
"version": "3.1.7.0"
},
{
"status": "affected",
"version": "3.1.8.0"
},
{
"status": "affected",
"version": "3.1.9.0"
},
{
"status": "affected",
"version": "3.1.10.0"
},
{
"status": "affected",
"version": "3.1.12.0"
},
{
"status": "affected",
"version": "3.1.13.0"
},
{
"status": "affected",
"version": "3.1.14.0"
},
{
"status": "affected",
"version": "3.1.15.0"
},
{
"status": "affected",
"version": "3.1.16.0"
},
{
"status": "affected",
"version": "3.1.17.0"
},
{
"status": "affected",
"version": "3.1.18.0"
},
{
"status": "affected",
"version": "3.1.19.0"
},
{
"status": "affected",
"version": "3.1.20.0"
},
{
"status": "affected",
"version": "3.1.21.0"
},
{
"status": "affected",
"version": "3.1.22.0"
},
{
"status": "affected",
"version": "3.1.23.0"
},
{
"status": "affected",
"version": "3.1.24.0"
},
{
"status": "affected",
"version": "3.1.25.0"
},
{
"status": "affected",
"version": "3.1.27.0"
},
{
"status": "affected",
"version": "3.1.28.0"
},
{
"status": "affected",
"version": "3.1.29.0"
},
{
"status": "affected",
"version": "3.1.30.0"
},
{
"status": "affected",
"version": "3.1.31.0"
},
{
"status": "affected",
"version": "3.1.32.0"
},
{
"status": "affected",
"version": "3.1.36.0"
},
{
"status": "affected",
"version": "3.1.38.0"
},
{
"status": "affected",
"version": "3.1.39.0"
},
{
"status": "affected",
"version": "3.1.40.0"
},
{
"status": "affected",
"version": "3.1.41.0"
},
{
"status": "affected",
"version": "3.1.42.0"
},
{
"status": "affected",
"version": "3.1.43.0"
},
{
"status": "affected",
"version": "3.1.45.0"
},
{
"status": "affected",
"version": "3.1.47.0"
},
{
"status": "affected",
"version": "3.1.48.0"
},
{
"status": "affected",
"version": "3.1.50.0"
},
{
"status": "affected",
"version": "3.1.51.0"
},
{
"status": "affected",
"version": "3.1.52.0"
},
{
"status": "affected",
"version": "3.1.53.0"
},
{
"status": "affected",
"version": "3.1.55.0"
},
{
"status": "affected",
"version": "3.1.56.0"
},
{
"status": "affected",
"version": "3.1.57.0"
},
{
"status": "affected",
"version": "3.1.58.0"
},
{
"status": "affected",
"version": "3.1.59.0"
},
{
"status": "affected",
"version": "3.1.60.0"
},
{
"status": "affected",
"version": "3.1.61.0"
},
{
"status": "affected",
"version": "3.1.62.0"
},
{
"status": "affected",
"version": "3.1.63.0"
},
{
"status": "affected",
"version": "3.1.64.0"
},
{
"status": "affected",
"version": "3.1.65.0"
},
{
"status": "affected",
"version": "3.1.66.0"
},
{
"status": "affected",
"version": "3.1.67.0"
},
{
"status": "affected",
"version": "3.1.69.0"
},
{
"status": "affected",
"version": "3.1.70.0"
},
{
"status": "affected",
"version": "3.1.71.0"
},
{
"status": "affected",
"version": "3.1.72.0"
},
{
"status": "affected",
"version": "3.1.73.0"
},
{
"status": "affected",
"version": "3.1.74.0"
},
{
"status": "affected",
"version": "3.1.75.0"
},
{
"status": "affected",
"version": "3.1.76.0"
},
{
"status": "affected",
"version": "3.1.77.0"
},
{
"status": "affected",
"version": "3.1.78.0"
},
{
"status": "affected",
"version": "3.1.81.0"
},
{
"status": "affected",
"version": "3.1.82.0"
},
{
"status": "affected",
"version": "3.1.83.0"
},
{
"status": "affected",
"version": "3.1.84.0"
},
{
"status": "affected",
"version": "3.2.1.0"
},
{
"status": "affected",
"version": "3.2.2.0"
},
{
"status": "affected",
"version": "3.3.0.0"
},
{
"status": "affected",
"version": "3.3.1.0"
},
{
"status": "affected",
"version": "3.3.2.0"
},
{
"status": "affected",
"version": "3.3.3.0"
},
{
"status": "affected",
"version": "3.3.4.0"
},
{
"status": "affected",
"version": "3.3.5.0"
},
{
"status": "affected",
"version": "3.3.7.0"
},
{
"status": "affected",
"version": "3.5.0.0"
},
{
"status": "affected",
"version": "3.5.1.0"
},
{
"status": "affected",
"version": "3.8.1.0"
},
{
"status": "affected",
"version": "3.6.0.0"
},
{
"status": "affected",
"version": "3.6.2.0"
},
{
"status": "affected",
"version": "3.9.3.0"
},
{
"status": "affected",
"version": "3.7.2.0"
},
{
"status": "affected",
"version": "3.7.0.0"
},
{
"status": "affected",
"version": "3.9.6.0"
},
{
"status": "affected",
"version": "3.10.0.0"
},
{
"status": "affected",
"version": "3.10.2.0"
},
{
"status": "affected",
"version": "3.7.4.0"
},
{
"status": "affected",
"version": "3.9.0.0"
},
{
"status": "affected",
"version": "3.5.2.0"
},
{
"status": "affected",
"version": "3.12.1.0"
},
{
"status": "affected",
"version": "3.6.1.0"
},
{
"status": "affected",
"version": "3.9.2.0"
},
{
"status": "affected",
"version": "3.6.3.0"
},
{
"status": "affected",
"version": "3.9.5.0"
},
{
"status": "affected",
"version": "3.7.1.0"
},
{
"status": "affected",
"version": "3.9.7.0"
},
{
"status": "affected",
"version": "3.7.3.0"
},
{
"status": "affected",
"version": "3.10.1.0"
},
{
"status": "affected",
"version": "3.9.1.0"
},
{
"status": "affected",
"version": "3.11.1.0"
}
]
},
{
"defaultStatus": "unknown",
"product": "Cisco Secure Firewall Threat Defense (FTD) Software",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "7.0.0"
},
{
"status": "affected",
"version": "7.0.0.1"
},
{
"status": "affected",
"version": "7.0.1"
},
{
"status": "affected",
"version": "7.0.1.1"
},
{
"status": "affected",
"version": "7.0.2"
},
{
"status": "affected",
"version": "7.2.0"
},
{
"status": "affected",
"version": "7.0.2.1"
},
{
"status": "affected",
"version": "7.0.3"
},
{
"status": "affected",
"version": "7.2.0.1"
},
{
"status": "affected",
"version": "7.0.4"
},
{
"status": "affected",
"version": "7.2.1"
},
{
"status": "affected",
"version": "7.0.5"
},
{
"status": "affected",
"version": "7.3.0"
},
{
"status": "affected",
"version": "7.2.2"
},
{
"status": "affected",
"version": "7.2.3"
},
{
"status": "affected",
"version": "7.3.1"
},
{
"status": "affected",
"version": "7.2.4"
},
{
"status": "affected",
"version": "7.0.6"
},
{
"status": "affected",
"version": "7.2.5"
},
{
"status": "affected",
"version": "7.2.4.1"
},
{
"status": "affected",
"version": "7.3.1.1"
},
{
"status": "affected",
"version": "7.4.0"
},
{
"status": "affected",
"version": "7.0.6.1"
},
{
"status": "affected",
"version": "7.2.5.1"
},
{
"status": "affected",
"version": "7.4.1"
},
{
"status": "affected",
"version": "7.2.6"
},
{
"status": "affected",
"version": "7.0.6.2"
},
{
"status": "affected",
"version": "7.4.1.1"
},
{
"status": "affected",
"version": "7.2.7"
},
{
"status": "affected",
"version": "7.2.5.2"
},
{
"status": "affected",
"version": "7.3.1.2"
},
{
"status": "affected",
"version": "7.2.8"
},
{
"status": "affected",
"version": "7.6.0"
},
{
"status": "affected",
"version": "7.4.2"
},
{
"status": "affected",
"version": "7.2.8.1"
},
{
"status": "affected",
"version": "7.0.6.3"
},
{
"status": "affected",
"version": "7.4.2.1"
},
{
"status": "affected",
"version": "7.2.9"
},
{
"status": "affected",
"version": "7.0.7"
},
{
"status": "affected",
"version": "7.7.0"
},
{
"status": "affected",
"version": "7.4.2.2"
},
{
"status": "affected",
"version": "7.6.1"
},
{
"status": "affected",
"version": "7.4.2.3"
},
{
"status": "affected",
"version": "7.0.8"
},
{
"status": "affected",
"version": "7.6.2"
},
{
"status": "affected",
"version": "7.7.10"
},
{
"status": "affected",
"version": "7.7.11"
},
{
"status": "affected",
"version": "7.0.8.1"
},
{
"status": "affected",
"version": "7.6.2.1"
},
{
"status": "affected",
"version": "7.7.10.1"
},
{
"status": "affected",
"version": "7.4.2.4"
},
{
"status": "affected",
"version": "7.4.3"
},
{
"status": "affected",
"version": "7.6.4"
},
{
"status": "affected",
"version": "10.0.0"
},
{
"status": "affected",
"version": "7.4.4"
},
{
"status": "affected",
"version": "7.0.9"
},
{
"status": "affected",
"version": "7.4.7"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Multiple Cisco products are affected by a vulnerability in the memory management implementation of Snort 3 that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption of packet inspection.\r\n\r\nThis vulnerability is due to incomplete error checking when Snort 3 processes files, which could cause unreleased memory. An attacker could exploit this vulnerability by sending a large number of files to be processed. A successful exploit could allow the attacker to cause the Snort 3 Detection Engine to restart unexpectedly, resulting in a DoS condition."
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-401",
"description": "Missing Release of Memory after Effective Lifetime",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-22T19:11:31.788Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-snort3-misc-dos-6mB22qAK",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort3-misc-dos-6mB22qAK"
}
],
"source": {
"advisory": "cisco-sa-snort3-misc-dos-6mB22qAK",
"defects": [
"CSCwr25134"
],
"discovery": "EXTERNAL"
},
"title": "Multiple Cisco Products Snort 3 Generic File Processing Memory Exhaustion Denial of Service Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2026-76489",
"datePublished": "2026-10-21T16:17:23.396Z",
"dateReserved": "2026-08-19T12:02:03.640Z",
"dateUpdated": "2026-10-22T19:11:31.788Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-76492 (GCVE-0-2026-76492)
Vulnerability from cvelistv5 – Published: 2026-10-21 16:17 – Updated: 2026-11-07 17:29
VLAI
EPSS
VEX
CVE Program bundle warning
The CVE Program recognizes that this CVE Record provides vulnerability information that a Supplier CNA believes is very important to consumers. The CVE Program has flagged this CVE Record as it assigns a single CVE ID to a collection of individual vulnerabilities which does not align with CVE's "one vulnerability, one ID" principle, and therefore provides incomplete information. For further clarification, please see the CVE Program's blog, "Preserving Vulnerability-Level Identification" linked below. Details within the CNA container below are viewable by clicking on the CNA name.
https://www.cve.org/Media/News/item/blog/2026/06/…Title
Cisco Expressway Series Software Hardening Release: October 2026 - NULL Pointer Vulnerabilities
Summary
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.
The vulnerabilities tracked by CVE-2026-76492 are related to issues concerning null pointers that are grouped under the Common Weakness Enumeration (CWE) Base CWE-476.
Severity
7.5 (High)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-22 13:21 UTC
CWE
- CWE-476 - NULL Pointer Dereference
Assigner
cisco
CNA
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Cisco | Cisco TelePresence Video Communication Server (VCS) Expressway |
Affected:
X8.11.2
Affected: X8.6 Affected: X8.11.3 Affected: X8.2.2 Affected: X8.8.3 Affected: X8.11.0 Affected: X12.5.2 Affected: X8.1.1 Affected: X8.9 Affected: X12.5.1 Affected: X12.5.6 Affected: X8.7.3 Affected: X12.6.0 Affected: X8.11.1 Affected: X8.5 Affected: X8.9.1 Affected: X8.10.2 Affected: X8.8.2 Affected: X8.5.3 Affected: X8.1 Affected: X8.9.2 Affected: X8.11.4 Affected: X12.5.4 Affected: X8.8.1 Affected: X8.2.1 Affected: X8.5.1 Affected: X8.6.1 Affected: X8.1.2 Affected: X8.8 Affected: X8.10.0 Affected: X12.5.3 Affected: X8.10.1 Affected: X12.5.7 Affected: X8.10.3 Affected: X8.7.1 Affected: X8.2 Affected: X12.5.8 Affected: X8.7 Affected: X8.5.2 Affected: X12.5.9 Affected: X12.5.0 Affected: X8.10.4 Affected: X8.7.2 Affected: X12.5.5 Affected: X12.6.1 Affected: X12.6.2 Affected: X12.6.3 Affected: X12.6.4 Affected: X12.7.0 Affected: X12.7.1 Affected: X14.0.0 Affected: X14.0.1 Affected: X14.0.2 Affected: X14.0.3 Affected: X14.0.4 Affected: X14.0.5 Affected: X14.0.6 Affected: X14.0.7 Affected: X14.0.8 Affected: X14.2.0 Affected: X14.0.9 Affected: X14.2.1 Affected: X14.2.2 Affected: X14.0.11 Affected: X14.2.5 Affected: X14.0.10 Affected: X14.2.6 Affected: X14.2.7 Affected: X14.3.0 Affected: X14.3.1 Affected: X14.3.2 Affected: X14.3.3 Affected: X15.0.0 Affected: X14.3.4 Affected: X14.3.5 Affected: X15.0.1 Affected: X15.0.2 Affected: X15.0.3 Affected: X14.3.6 Affected: X15.2.0 Affected: X15.2.1 Affected: X15.2.2 Affected: X15.2.3 Affected: X14.3.7 Affected: X15.2.4. Affected: X15.2.4 Affected: X15.3.0 Affected: X15.3.1 Affected: X15.3.2 Affected: X15.4.0 Affected: X15.5.0 Affected: X15.5.1 Affected: X15.5.2 Affected: X15.5.3 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-76492",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-22T13:21:16.254332Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-22T13:37:53.228Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"descriptions": [
{
"lang": "en",
"value": "The CVE Program recognizes that this CVE Record provides vulnerability information that a Supplier CNA believes is very important to consumers. The CVE Program has flagged this CVE Record as it assigns a single CVE ID to a collection of individual vulnerabilities which does not align with CVE\u0027s \"one vulnerability, one ID\" principle, and therefore provides incomplete information. For further clarification, please see the CVE Program\u0027s blog, \"Preserving Vulnerability-Level Identification\" linked below. Details within the CNA container below are viewable by clicking on the CNA name."
}
],
"providerMetadata": {
"dateUpdated": "2026-11-07T17:29:43.580Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"url": "https://www.cve.org/Media/News/item/blog/2026/06/16/Preserving-Vulnerability-Level-Identification"
}
],
"tags": [
"x_bundling-flagged-by-CVE-Program"
]
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Cisco TelePresence Video Communication Server (VCS) Expressway",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "X8.11.2"
},
{
"status": "affected",
"version": "X8.6"
},
{
"status": "affected",
"version": "X8.11.3"
},
{
"status": "affected",
"version": "X8.2.2"
},
{
"status": "affected",
"version": "X8.8.3"
},
{
"status": "affected",
"version": "X8.11.0"
},
{
"status": "affected",
"version": "X12.5.2"
},
{
"status": "affected",
"version": "X8.1.1"
},
{
"status": "affected",
"version": "X8.9"
},
{
"status": "affected",
"version": "X12.5.1"
},
{
"status": "affected",
"version": "X12.5.6"
},
{
"status": "affected",
"version": "X8.7.3"
},
{
"status": "affected",
"version": "X12.6.0"
},
{
"status": "affected",
"version": "X8.11.1"
},
{
"status": "affected",
"version": "X8.5"
},
{
"status": "affected",
"version": "X8.9.1"
},
{
"status": "affected",
"version": "X8.10.2"
},
{
"status": "affected",
"version": "X8.8.2"
},
{
"status": "affected",
"version": "X8.5.3"
},
{
"status": "affected",
"version": "X8.1"
},
{
"status": "affected",
"version": "X8.9.2"
},
{
"status": "affected",
"version": "X8.11.4"
},
{
"status": "affected",
"version": "X12.5.4"
},
{
"status": "affected",
"version": "X8.8.1"
},
{
"status": "affected",
"version": "X8.2.1"
},
{
"status": "affected",
"version": "X8.5.1"
},
{
"status": "affected",
"version": "X8.6.1"
},
{
"status": "affected",
"version": "X8.1.2"
},
{
"status": "affected",
"version": "X8.8"
},
{
"status": "affected",
"version": "X8.10.0"
},
{
"status": "affected",
"version": "X12.5.3"
},
{
"status": "affected",
"version": "X8.10.1"
},
{
"status": "affected",
"version": "X12.5.7"
},
{
"status": "affected",
"version": "X8.10.3"
},
{
"status": "affected",
"version": "X8.7.1"
},
{
"status": "affected",
"version": "X8.2"
},
{
"status": "affected",
"version": "X12.5.8"
},
{
"status": "affected",
"version": "X8.7"
},
{
"status": "affected",
"version": "X8.5.2"
},
{
"status": "affected",
"version": "X12.5.9"
},
{
"status": "affected",
"version": "X12.5.0"
},
{
"status": "affected",
"version": "X8.10.4"
},
{
"status": "affected",
"version": "X8.7.2"
},
{
"status": "affected",
"version": "X12.5.5"
},
{
"status": "affected",
"version": "X12.6.1"
},
{
"status": "affected",
"version": "X12.6.2"
},
{
"status": "affected",
"version": "X12.6.3"
},
{
"status": "affected",
"version": "X12.6.4"
},
{
"status": "affected",
"version": "X12.7.0"
},
{
"status": "affected",
"version": "X12.7.1"
},
{
"status": "affected",
"version": "X14.0.0"
},
{
"status": "affected",
"version": "X14.0.1"
},
{
"status": "affected",
"version": "X14.0.2"
},
{
"status": "affected",
"version": "X14.0.3"
},
{
"status": "affected",
"version": "X14.0.4"
},
{
"status": "affected",
"version": "X14.0.5"
},
{
"status": "affected",
"version": "X14.0.6"
},
{
"status": "affected",
"version": "X14.0.7"
},
{
"status": "affected",
"version": "X14.0.8"
},
{
"status": "affected",
"version": "X14.2.0"
},
{
"status": "affected",
"version": "X14.0.9"
},
{
"status": "affected",
"version": "X14.2.1"
},
{
"status": "affected",
"version": "X14.2.2"
},
{
"status": "affected",
"version": "X14.0.11"
},
{
"status": "affected",
"version": "X14.2.5"
},
{
"status": "affected",
"version": "X14.0.10"
},
{
"status": "affected",
"version": "X14.2.6"
},
{
"status": "affected",
"version": "X14.2.7"
},
{
"status": "affected",
"version": "X14.3.0"
},
{
"status": "affected",
"version": "X14.3.1"
},
{
"status": "affected",
"version": "X14.3.2"
},
{
"status": "affected",
"version": "X14.3.3"
},
{
"status": "affected",
"version": "X15.0.0"
},
{
"status": "affected",
"version": "X14.3.4"
},
{
"status": "affected",
"version": "X14.3.5"
},
{
"status": "affected",
"version": "X15.0.1"
},
{
"status": "affected",
"version": "X15.0.2"
},
{
"status": "affected",
"version": "X15.0.3"
},
{
"status": "affected",
"version": "X14.3.6"
},
{
"status": "affected",
"version": "X15.2.0"
},
{
"status": "affected",
"version": "X15.2.1"
},
{
"status": "affected",
"version": "X15.2.2"
},
{
"status": "affected",
"version": "X15.2.3"
},
{
"status": "affected",
"version": "X14.3.7"
},
{
"status": "affected",
"version": "X15.2.4."
},
{
"status": "affected",
"version": "X15.2.4"
},
{
"status": "affected",
"version": "X15.3.0"
},
{
"status": "affected",
"version": "X15.3.1"
},
{
"status": "affected",
"version": "X15.3.2"
},
{
"status": "affected",
"version": "X15.4.0"
},
{
"status": "affected",
"version": "X15.5.0"
},
{
"status": "affected",
"version": "X15.5.1"
},
{
"status": "affected",
"version": "X15.5.2"
},
{
"status": "affected",
"version": "X15.5.3"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "As part of Cisco\u0027s ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. \u0026nbsp;\r\n\r\nThe vulnerabilities tracked by CVE-2026-76492 are related to issues concerning null pointers that are grouped under the Common Weakness Enumeration (CWE) Base CWE-476."
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-476",
"description": "NULL Pointer Dereference",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-21T16:17:14.565Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-exwy-hardening-FhcqBVcs",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-exwy-hardening-FhcqBVcs"
}
],
"source": {
"advisory": "cisco-sa-exwy-hardening-FhcqBVcs",
"defects": [
"CSCww67927"
],
"discovery": "INTERNAL"
},
"title": "Cisco Expressway Series Software Hardening Release: October 2026 - NULL Pointer Vulnerabilities"
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2026-76492",
"datePublished": "2026-10-21T16:17:14.565Z",
"dateReserved": "2026-08-19T12:02:03.640Z",
"dateUpdated": "2026-11-07T17:29:43.580Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-76491 (GCVE-0-2026-76491)
Vulnerability from cvelistv5 – Published: 2026-10-21 16:17 – Updated: 2026-11-07 17:29
VLAI
EPSS
VEX
CVE Program bundle warning
The CVE Program recognizes that this CVE Record provides vulnerability information that a Supplier CNA believes is very important to consumers. The CVE Program has flagged this CVE Record as it assigns a single CVE ID to a collection of individual vulnerabilities which does not align with CVE's "one vulnerability, one ID" principle, and therefore provides incomplete information. For further clarification, please see the CVE Program's blog, "Preserving Vulnerability-Level Identification" linked below. Details within the CNA container below are viewable by clicking on the CNA name.
https://www.cve.org/Media/News/item/blog/2026/06/…Title
Cisco Expressway Series Software Hardening Release: October 2026 - Denial of Service Vulnerabilities
Summary
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.
The vulnerabilities tracked by CVE-2026-76491 are related to issues concerning reachable assertions that are grouped under the Common Weakness Enumeration (CWE) Base CWE-617.
Severity
7.5 (High)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-21 17:15 UTC
CWE
- CWE-617 - Reachable Assertion
Assigner
cisco
CNA
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Cisco | Cisco TelePresence Video Communication Server (VCS) Expressway |
Affected:
X8.11.2
Affected: X8.6 Affected: X8.11.3 Affected: X8.2.2 Affected: X8.8.3 Affected: X8.11.0 Affected: X12.5.2 Affected: X8.1.1 Affected: X8.9 Affected: X12.5.1 Affected: X12.5.6 Affected: X8.7.3 Affected: X12.6.0 Affected: X8.11.1 Affected: X8.5 Affected: X8.9.1 Affected: X8.10.2 Affected: X8.8.2 Affected: X8.5.3 Affected: X8.1 Affected: X8.9.2 Affected: X8.11.4 Affected: X12.5.4 Affected: X8.8.1 Affected: X8.2.1 Affected: X8.5.1 Affected: X8.6.1 Affected: X8.1.2 Affected: X8.8 Affected: X8.10.0 Affected: X12.5.3 Affected: X8.10.1 Affected: X12.5.7 Affected: X8.10.3 Affected: X8.7.1 Affected: X8.2 Affected: X12.5.8 Affected: X8.7 Affected: X8.5.2 Affected: X12.5.9 Affected: X12.5.0 Affected: X8.10.4 Affected: X8.7.2 Affected: X12.5.5 Affected: X12.6.1 Affected: X12.6.2 Affected: X12.6.3 Affected: X12.6.4 Affected: X12.7.0 Affected: X12.7.1 Affected: X14.0.0 Affected: X14.0.1 Affected: X14.0.2 Affected: X14.0.3 Affected: X14.0.4 Affected: X14.0.5 Affected: X14.0.6 Affected: X14.0.7 Affected: X14.0.8 Affected: X14.2.0 Affected: X14.0.9 Affected: X14.2.1 Affected: X14.2.2 Affected: X14.0.11 Affected: X14.2.5 Affected: X14.0.10 Affected: X14.2.6 Affected: X14.2.7 Affected: X14.3.0 Affected: X14.3.1 Affected: X14.3.2 Affected: X14.3.3 Affected: X15.0.0 Affected: X14.3.4 Affected: X14.3.5 Affected: X15.0.1 Affected: X15.0.2 Affected: X15.0.3 Affected: X14.3.6 Affected: X15.2.0 Affected: X15.2.1 Affected: X15.2.2 Affected: X15.2.3 Affected: X14.3.7 Affected: X15.2.4. Affected: X15.2.4 Affected: X15.3.0 Affected: X15.3.1 Affected: X15.3.2 Affected: X15.4.0 Affected: X15.5.0 Affected: X15.5.1 Affected: X15.5.2 Affected: X15.5.3 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-76491",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-21T17:15:05.406749Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-22T13:37:53.379Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"descriptions": [
{
"lang": "en",
"value": "The CVE Program recognizes that this CVE Record provides vulnerability information that a Supplier CNA believes is very important to consumers. The CVE Program has flagged this CVE Record as it assigns a single CVE ID to a collection of individual vulnerabilities which does not align with CVE\u0027s \"one vulnerability, one ID\" principle, and therefore provides incomplete information. For further clarification, please see the CVE Program\u0027s blog, \"Preserving Vulnerability-Level Identification\" linked below. Details within the CNA container below are viewable by clicking on the CNA name."
}
],
"providerMetadata": {
"dateUpdated": "2026-11-07T17:29:43.471Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"url": "https://www.cve.org/Media/News/item/blog/2026/06/16/Preserving-Vulnerability-Level-Identification"
}
],
"tags": [
"x_bundling-flagged-by-CVE-Program"
]
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Cisco TelePresence Video Communication Server (VCS) Expressway",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "X8.11.2"
},
{
"status": "affected",
"version": "X8.6"
},
{
"status": "affected",
"version": "X8.11.3"
},
{
"status": "affected",
"version": "X8.2.2"
},
{
"status": "affected",
"version": "X8.8.3"
},
{
"status": "affected",
"version": "X8.11.0"
},
{
"status": "affected",
"version": "X12.5.2"
},
{
"status": "affected",
"version": "X8.1.1"
},
{
"status": "affected",
"version": "X8.9"
},
{
"status": "affected",
"version": "X12.5.1"
},
{
"status": "affected",
"version": "X12.5.6"
},
{
"status": "affected",
"version": "X8.7.3"
},
{
"status": "affected",
"version": "X12.6.0"
},
{
"status": "affected",
"version": "X8.11.1"
},
{
"status": "affected",
"version": "X8.5"
},
{
"status": "affected",
"version": "X8.9.1"
},
{
"status": "affected",
"version": "X8.10.2"
},
{
"status": "affected",
"version": "X8.8.2"
},
{
"status": "affected",
"version": "X8.5.3"
},
{
"status": "affected",
"version": "X8.1"
},
{
"status": "affected",
"version": "X8.9.2"
},
{
"status": "affected",
"version": "X8.11.4"
},
{
"status": "affected",
"version": "X12.5.4"
},
{
"status": "affected",
"version": "X8.8.1"
},
{
"status": "affected",
"version": "X8.2.1"
},
{
"status": "affected",
"version": "X8.5.1"
},
{
"status": "affected",
"version": "X8.6.1"
},
{
"status": "affected",
"version": "X8.1.2"
},
{
"status": "affected",
"version": "X8.8"
},
{
"status": "affected",
"version": "X8.10.0"
},
{
"status": "affected",
"version": "X12.5.3"
},
{
"status": "affected",
"version": "X8.10.1"
},
{
"status": "affected",
"version": "X12.5.7"
},
{
"status": "affected",
"version": "X8.10.3"
},
{
"status": "affected",
"version": "X8.7.1"
},
{
"status": "affected",
"version": "X8.2"
},
{
"status": "affected",
"version": "X12.5.8"
},
{
"status": "affected",
"version": "X8.7"
},
{
"status": "affected",
"version": "X8.5.2"
},
{
"status": "affected",
"version": "X12.5.9"
},
{
"status": "affected",
"version": "X12.5.0"
},
{
"status": "affected",
"version": "X8.10.4"
},
{
"status": "affected",
"version": "X8.7.2"
},
{
"status": "affected",
"version": "X12.5.5"
},
{
"status": "affected",
"version": "X12.6.1"
},
{
"status": "affected",
"version": "X12.6.2"
},
{
"status": "affected",
"version": "X12.6.3"
},
{
"status": "affected",
"version": "X12.6.4"
},
{
"status": "affected",
"version": "X12.7.0"
},
{
"status": "affected",
"version": "X12.7.1"
},
{
"status": "affected",
"version": "X14.0.0"
},
{
"status": "affected",
"version": "X14.0.1"
},
{
"status": "affected",
"version": "X14.0.2"
},
{
"status": "affected",
"version": "X14.0.3"
},
{
"status": "affected",
"version": "X14.0.4"
},
{
"status": "affected",
"version": "X14.0.5"
},
{
"status": "affected",
"version": "X14.0.6"
},
{
"status": "affected",
"version": "X14.0.7"
},
{
"status": "affected",
"version": "X14.0.8"
},
{
"status": "affected",
"version": "X14.2.0"
},
{
"status": "affected",
"version": "X14.0.9"
},
{
"status": "affected",
"version": "X14.2.1"
},
{
"status": "affected",
"version": "X14.2.2"
},
{
"status": "affected",
"version": "X14.0.11"
},
{
"status": "affected",
"version": "X14.2.5"
},
{
"status": "affected",
"version": "X14.0.10"
},
{
"status": "affected",
"version": "X14.2.6"
},
{
"status": "affected",
"version": "X14.2.7"
},
{
"status": "affected",
"version": "X14.3.0"
},
{
"status": "affected",
"version": "X14.3.1"
},
{
"status": "affected",
"version": "X14.3.2"
},
{
"status": "affected",
"version": "X14.3.3"
},
{
"status": "affected",
"version": "X15.0.0"
},
{
"status": "affected",
"version": "X14.3.4"
},
{
"status": "affected",
"version": "X14.3.5"
},
{
"status": "affected",
"version": "X15.0.1"
},
{
"status": "affected",
"version": "X15.0.2"
},
{
"status": "affected",
"version": "X15.0.3"
},
{
"status": "affected",
"version": "X14.3.6"
},
{
"status": "affected",
"version": "X15.2.0"
},
{
"status": "affected",
"version": "X15.2.1"
},
{
"status": "affected",
"version": "X15.2.2"
},
{
"status": "affected",
"version": "X15.2.3"
},
{
"status": "affected",
"version": "X14.3.7"
},
{
"status": "affected",
"version": "X15.2.4."
},
{
"status": "affected",
"version": "X15.2.4"
},
{
"status": "affected",
"version": "X15.3.0"
},
{
"status": "affected",
"version": "X15.3.1"
},
{
"status": "affected",
"version": "X15.3.2"
},
{
"status": "affected",
"version": "X15.4.0"
},
{
"status": "affected",
"version": "X15.5.0"
},
{
"status": "affected",
"version": "X15.5.1"
},
{
"status": "affected",
"version": "X15.5.2"
},
{
"status": "affected",
"version": "X15.5.3"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "As part of Cisco\u0027s ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. \u0026nbsp;\r\n\r\nThe vulnerabilities tracked by CVE-2026-76491 are related to issues concerning reachable assertions that are grouped under the Common Weakness Enumeration (CWE) Base CWE-617."
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-617",
"description": "Reachable Assertion",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-21T16:17:04.407Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-exwy-hardening-FhcqBVcs",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-exwy-hardening-FhcqBVcs"
}
],
"source": {
"advisory": "cisco-sa-exwy-hardening-FhcqBVcs",
"defects": [
"CSCww67923"
],
"discovery": "INTERNAL"
},
"title": "Cisco Expressway Series Software Hardening Release: October 2026 - Denial of Service Vulnerabilities"
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2026-76491",
"datePublished": "2026-10-21T16:17:04.407Z",
"dateReserved": "2026-08-19T12:02:03.640Z",
"dateUpdated": "2026-11-07T17:29:43.471Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-76481 (GCVE-0-2026-76481)
Vulnerability from cvelistv5 – Published: 2026-10-21 16:16 – Updated: 2026-11-07 17:29
VLAI
EPSS
VEX
CVE Program bundle warning
The CVE Program recognizes that this CVE Record provides vulnerability information that a Supplier CNA believes is very important to consumers. The CVE Program has flagged this CVE Record as it assigns a single CVE ID to a collection of individual vulnerabilities which does not align with CVE's "one vulnerability, one ID" principle, and therefore provides incomplete information. For further clarification, please see the CVE Program's blog, "Preserving Vulnerability-Level Identification" linked below. Details within the CNA container below are viewable by clicking on the CNA name.
https://www.cve.org/Media/News/item/blog/2026/06/…Title
Cisco Unified Communications Products Hardening Release: October 2026 - Improper Check or Handling of Exceptional Conditions Vulnerabilities
Summary
As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unity Connection have conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.
The vulnerabilities tracked by CVE-2026-76481 are related to issues concerning improper handling of exceptional conditions that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-703.
Severity
7.5 (High)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-21 16:39 UTC
CWE
- CWE-703 - Improper Check or Handling of Exceptional Conditions
Assigner
cisco
CNA
References
1 reference
Impacted products
4 products
| Vendor | Product | Version | |
|---|---|---|---|
| Cisco | Cisco Emergency Responder |
Affected:
14
Affected: 14SU1 Affected: 14SU2 Affected: 14SU3 Affected: 14SU3a Affected: 15 Affected: 15SU1 Affected: 15SU1a Affected: 14SU4 Affected: 15SU2 Affected: 15SU3 Affected: 14SU5 Affected: 15SU4 Affected: 14SU6 |
|
| Cisco | Cisco Unified Communications Manager |
Affected:
14
Affected: 14SU1 Affected: 14SU2 Affected: 14SU3 Affected: 15 Affected: 15SU1 Affected: 14SU4 Affected: 14SU4a Affected: 15SU1a Affected: 15SU2 Affected: 15.0.1.13010-1 Affected: 15.0.1.13011-1 Affected: 15.0.1.13012-1 Affected: 15.0.1.13013-1 Affected: 15.0.1.13014-1 Affected: 15.0.1.13015-1 Affected: 15.0.1.13016-1 Affected: 15.0.1.13017-1 Affected: 15SU3a Affected: 14SU5 Affected: 15SU4 Affected: 15SU4a Affected: 14SU6 |
|
| Cisco | Cisco Unified Communications Manager IM and Presence Service |
Affected:
14
Affected: 14SU1 Affected: 14SU2 Affected: 14SU2a Affected: 14SU3 Affected: 15 Affected: 15SU1 Affected: 14SU4 Affected: 15SU2 Affected: 15SU3 Affected: 14SU5 Affected: 15SU4 Affected: 14SU6 |
|
| Cisco | Cisco Unity Connection |
Affected:
14
Affected: 14SU1 Affected: 14SU2 Affected: 14SU3 Affected: 14SU3a Affected: 15 Affected: 15SU1 Affected: 14SU4 Affected: 15SU2 Affected: 15SU3 Affected: 14SU5 Affected: 15SU4 Affected: 14SU6 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-76481",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-21T16:39:40.405292Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-21T17:19:11.727Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"descriptions": [
{
"lang": "en",
"value": "The CVE Program recognizes that this CVE Record provides vulnerability information that a Supplier CNA believes is very important to consumers. The CVE Program has flagged this CVE Record as it assigns a single CVE ID to a collection of individual vulnerabilities which does not align with CVE\u0027s \"one vulnerability, one ID\" principle, and therefore provides incomplete information. For further clarification, please see the CVE Program\u0027s blog, \"Preserving Vulnerability-Level Identification\" linked below. Details within the CNA container below are viewable by clicking on the CNA name."
}
],
"providerMetadata": {
"dateUpdated": "2026-11-07T17:29:43.239Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"url": "https://www.cve.org/Media/News/item/blog/2026/06/16/Preserving-Vulnerability-Level-Identification"
}
],
"tags": [
"x_bundling-flagged-by-CVE-Program"
]
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Cisco Emergency Responder",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "14"
},
{
"status": "affected",
"version": "14SU1"
},
{
"status": "affected",
"version": "14SU2"
},
{
"status": "affected",
"version": "14SU3"
},
{
"status": "affected",
"version": "14SU3a"
},
{
"status": "affected",
"version": "15"
},
{
"status": "affected",
"version": "15SU1"
},
{
"status": "affected",
"version": "15SU1a"
},
{
"status": "affected",
"version": "14SU4"
},
{
"status": "affected",
"version": "15SU2"
},
{
"status": "affected",
"version": "15SU3"
},
{
"status": "affected",
"version": "14SU5"
},
{
"status": "affected",
"version": "15SU4"
},
{
"status": "affected",
"version": "14SU6"
}
]
},
{
"defaultStatus": "unknown",
"product": "Cisco Unified Communications Manager",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "14"
},
{
"status": "affected",
"version": "14SU1"
},
{
"status": "affected",
"version": "14SU2"
},
{
"status": "affected",
"version": "14SU3"
},
{
"status": "affected",
"version": "15"
},
{
"status": "affected",
"version": "15SU1"
},
{
"status": "affected",
"version": "14SU4"
},
{
"status": "affected",
"version": "14SU4a"
},
{
"status": "affected",
"version": "15SU1a"
},
{
"status": "affected",
"version": "15SU2"
},
{
"status": "affected",
"version": "15.0.1.13010-1"
},
{
"status": "affected",
"version": "15.0.1.13011-1"
},
{
"status": "affected",
"version": "15.0.1.13012-1"
},
{
"status": "affected",
"version": "15.0.1.13013-1"
},
{
"status": "affected",
"version": "15.0.1.13014-1"
},
{
"status": "affected",
"version": "15.0.1.13015-1"
},
{
"status": "affected",
"version": "15.0.1.13016-1"
},
{
"status": "affected",
"version": "15.0.1.13017-1"
},
{
"status": "affected",
"version": "15SU3a"
},
{
"status": "affected",
"version": "14SU5"
},
{
"status": "affected",
"version": "15SU4"
},
{
"status": "affected",
"version": "15SU4a"
},
{
"status": "affected",
"version": "14SU6"
}
]
},
{
"defaultStatus": "unknown",
"product": "Cisco Unified Communications Manager IM and Presence Service",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "14"
},
{
"status": "affected",
"version": "14SU1"
},
{
"status": "affected",
"version": "14SU2"
},
{
"status": "affected",
"version": "14SU2a"
},
{
"status": "affected",
"version": "14SU3"
},
{
"status": "affected",
"version": "15"
},
{
"status": "affected",
"version": "15SU1"
},
{
"status": "affected",
"version": "14SU4"
},
{
"status": "affected",
"version": "15SU2"
},
{
"status": "affected",
"version": "15SU3"
},
{
"status": "affected",
"version": "14SU5"
},
{
"status": "affected",
"version": "15SU4"
},
{
"status": "affected",
"version": "14SU6"
}
]
},
{
"defaultStatus": "unknown",
"product": "Cisco Unity Connection",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "14"
},
{
"status": "affected",
"version": "14SU1"
},
{
"status": "affected",
"version": "14SU2"
},
{
"status": "affected",
"version": "14SU3"
},
{
"status": "affected",
"version": "14SU3a"
},
{
"status": "affected",
"version": "15"
},
{
"status": "affected",
"version": "15SU1"
},
{
"status": "affected",
"version": "14SU4"
},
{
"status": "affected",
"version": "15SU2"
},
{
"status": "affected",
"version": "15SU3"
},
{
"status": "affected",
"version": "14SU5"
},
{
"status": "affected",
"version": "15SU4"
},
{
"status": "affected",
"version": "14SU6"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "As part of Cisco\u0027s ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM \u0026amp; Presence Service (Unified CM IM\u0026amp;P), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unity Connection have conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.\r\n\r\nThe vulnerabilities tracked by CVE-2026-76481 are related to issues concerning improper handling of exceptional conditions that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-703."
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-703",
"description": "Improper Check or Handling of Exceptional Conditions",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-21T16:16:58.417Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-voice-hardening-twgbH9e3",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-voice-hardening-twgbH9e3"
}
],
"source": {
"advisory": "cisco-sa-voice-hardening-twgbH9e3",
"defects": [
"CSCwu83356"
],
"discovery": "INTERNAL"
},
"title": "Cisco Unified Communications Products Hardening Release: October 2026 - Improper Check or Handling of Exceptional Conditions Vulnerabilities"
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2026-76481",
"datePublished": "2026-10-21T16:16:58.417Z",
"dateReserved": "2026-08-19T12:02:03.639Z",
"dateUpdated": "2026-11-07T17:29:43.239Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-76487 (GCVE-0-2026-76487)
Vulnerability from cvelistv5 – Published: 2026-10-21 16:16 – Updated: 2026-10-22 13:37
VLAI
EPSS
VEX
Title
Cisco Unified Communications Manager Improper Access Control Vulnerability
Summary
A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an unauthenticated, remote attacker to conduct access control bypass attacks on an affected device.
This vulnerability is due to improper input validation for specific HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to access parts of the network that are beyond the scope of their intended access.
Severity
5.3 (Medium)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-22 13:21 UTC
CWE
- CWE-749 - Exposed Dangerous Method or Function
Assigner
cisco
CNA
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Cisco | Cisco Unified Communications Manager |
Affected:
14
Affected: 14SU1 Affected: 14SU2 Affected: 14SU3 Affected: 15 Affected: 15SU1 Affected: 14SU4 Affected: 14SU4a Affected: 15SU1a Affected: 15SU2 Affected: 15.0.1.13010-1 Affected: 15.0.1.13011-1 Affected: 15.0.1.13012-1 Affected: 15.0.1.13013-1 Affected: 15.0.1.13014-1 Affected: 15.0.1.13015-1 Affected: 15.0.1.13016-1 Affected: 15.0.1.13017-1 Affected: 15SU3a Affected: 14SU5 Affected: 15SU4 Affected: 15SU4a Affected: 14SU6 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-76487",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-22T13:21:24.610490Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-22T13:37:53.516Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Cisco Unified Communications Manager",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "14"
},
{
"status": "affected",
"version": "14SU1"
},
{
"status": "affected",
"version": "14SU2"
},
{
"status": "affected",
"version": "14SU3"
},
{
"status": "affected",
"version": "15"
},
{
"status": "affected",
"version": "15SU1"
},
{
"status": "affected",
"version": "14SU4"
},
{
"status": "affected",
"version": "14SU4a"
},
{
"status": "affected",
"version": "15SU1a"
},
{
"status": "affected",
"version": "15SU2"
},
{
"status": "affected",
"version": "15.0.1.13010-1"
},
{
"status": "affected",
"version": "15.0.1.13011-1"
},
{
"status": "affected",
"version": "15.0.1.13012-1"
},
{
"status": "affected",
"version": "15.0.1.13013-1"
},
{
"status": "affected",
"version": "15.0.1.13014-1"
},
{
"status": "affected",
"version": "15.0.1.13015-1"
},
{
"status": "affected",
"version": "15.0.1.13016-1"
},
{
"status": "affected",
"version": "15.0.1.13017-1"
},
{
"status": "affected",
"version": "15SU3a"
},
{
"status": "affected",
"version": "14SU5"
},
{
"status": "affected",
"version": "15SU4"
},
{
"status": "affected",
"version": "15SU4a"
},
{
"status": "affected",
"version": "14SU6"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an unauthenticated, remote attacker to conduct access control bypass attacks on an affected device.\r\n\r\nThis vulnerability is due to improper input validation for specific HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to access parts of the network that are beyond the scope of their intended access."
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-749",
"description": "Exposed Dangerous Method or Function",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-21T16:16:54.579Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-cucm-access-PW9e8Jt2",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-access-PW9e8Jt2"
}
],
"source": {
"advisory": "cisco-sa-cucm-access-PW9e8Jt2",
"defects": [
"CSCwv00936"
],
"discovery": "EXTERNAL"
},
"title": "Cisco Unified Communications Manager Improper Access Control Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2026-76487",
"datePublished": "2026-10-21T16:16:54.579Z",
"dateReserved": "2026-08-19T12:02:03.639Z",
"dateUpdated": "2026-10-22T13:37:53.516Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-76479 (GCVE-0-2026-76479)
Vulnerability from cvelistv5 – Published: 2026-10-21 16:15 – Updated: 2026-11-07 17:29
VLAI
EPSS
VEX
CVE Program bundle warning
The CVE Program recognizes that this CVE Record provides vulnerability information that a Supplier CNA believes is very important to consumers. The CVE Program has flagged this CVE Record as it assigns a single CVE ID to a collection of individual vulnerabilities which does not align with CVE's "one vulnerability, one ID" principle, and therefore provides incomplete information. For further clarification, please see the CVE Program's blog, "Preserving Vulnerability-Level Identification" linked below. Details within the CNA container below are viewable by clicking on the CNA name.
https://www.cve.org/Media/News/item/blog/2026/06/…Title
Cisco Unified Communications Products Hardening Release: October 2026 - Path Traversal Vulnerabilities
Summary
As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unity Connection have conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.
The vulnerabilities tracked by CVE-2026-76479 are related to issues concerning improper limitation of a pathname to a restricted directory that are grouped under the Common Weakness Enumeration (CWE) Base CWE-22.
Severity
7.8 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-21 00:00 UTC
CWE
- CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Assigner
cisco
CNA
References
1 reference
Impacted products
4 products
| Vendor | Product | Version | |
|---|---|---|---|
| Cisco | Cisco Emergency Responder |
Affected:
14
Affected: 14SU1 Affected: 14SU2 Affected: 14SU3 Affected: 14SU3a Affected: 15 Affected: 15SU1 Affected: 15SU1a Affected: 14SU4 Affected: 15SU2 Affected: 15SU3 Affected: 14SU5 Affected: 15SU4 Affected: 14SU6 |
|
| Cisco | Cisco Unified Communications Manager |
Affected:
14
Affected: 14SU1 Affected: 14SU2 Affected: 14SU3 Affected: 15 Affected: 15SU1 Affected: 14SU4 Affected: 14SU4a Affected: 15SU1a Affected: 15SU2 Affected: 15.0.1.13010-1 Affected: 15.0.1.13011-1 Affected: 15.0.1.13012-1 Affected: 15.0.1.13013-1 Affected: 15.0.1.13014-1 Affected: 15.0.1.13015-1 Affected: 15.0.1.13016-1 Affected: 15.0.1.13017-1 Affected: 15SU3a Affected: 14SU5 Affected: 15SU4 Affected: 15SU4a Affected: 14SU6 |
|
| Cisco | Cisco Unified Communications Manager IM and Presence Service |
Affected:
14
Affected: 14SU1 Affected: 14SU2 Affected: 14SU2a Affected: 14SU3 Affected: 15 Affected: 15SU1 Affected: 14SU4 Affected: 15SU2 Affected: 15SU3 Affected: 14SU5 Affected: 15SU4 Affected: 14SU6 |
|
| Cisco | Cisco Unity Connection |
Affected:
14
Affected: 14SU1 Affected: 14SU2 Affected: 14SU3 Affected: 14SU3a Affected: 15 Affected: 15SU1 Affected: 14SU4 Affected: 15SU2 Affected: 15SU3 Affected: 14SU5 Affected: 15SU4 Affected: 14SU6 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-76479",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-21T00:00:00+00:00",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-22T23:04:36.581Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"descriptions": [
{
"lang": "en",
"value": "The CVE Program recognizes that this CVE Record provides vulnerability information that a Supplier CNA believes is very important to consumers. The CVE Program has flagged this CVE Record as it assigns a single CVE ID to a collection of individual vulnerabilities which does not align with CVE\u0027s \"one vulnerability, one ID\" principle, and therefore provides incomplete information. For further clarification, please see the CVE Program\u0027s blog, \"Preserving Vulnerability-Level Identification\" linked below. Details within the CNA container below are viewable by clicking on the CNA name."
}
],
"providerMetadata": {
"dateUpdated": "2026-11-07T17:29:43.127Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"url": "https://www.cve.org/Media/News/item/blog/2026/06/16/Preserving-Vulnerability-Level-Identification"
}
],
"tags": [
"x_bundling-flagged-by-CVE-Program"
]
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Cisco Emergency Responder",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "14"
},
{
"status": "affected",
"version": "14SU1"
},
{
"status": "affected",
"version": "14SU2"
},
{
"status": "affected",
"version": "14SU3"
},
{
"status": "affected",
"version": "14SU3a"
},
{
"status": "affected",
"version": "15"
},
{
"status": "affected",
"version": "15SU1"
},
{
"status": "affected",
"version": "15SU1a"
},
{
"status": "affected",
"version": "14SU4"
},
{
"status": "affected",
"version": "15SU2"
},
{
"status": "affected",
"version": "15SU3"
},
{
"status": "affected",
"version": "14SU5"
},
{
"status": "affected",
"version": "15SU4"
},
{
"status": "affected",
"version": "14SU6"
}
]
},
{
"defaultStatus": "unknown",
"product": "Cisco Unified Communications Manager",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "14"
},
{
"status": "affected",
"version": "14SU1"
},
{
"status": "affected",
"version": "14SU2"
},
{
"status": "affected",
"version": "14SU3"
},
{
"status": "affected",
"version": "15"
},
{
"status": "affected",
"version": "15SU1"
},
{
"status": "affected",
"version": "14SU4"
},
{
"status": "affected",
"version": "14SU4a"
},
{
"status": "affected",
"version": "15SU1a"
},
{
"status": "affected",
"version": "15SU2"
},
{
"status": "affected",
"version": "15.0.1.13010-1"
},
{
"status": "affected",
"version": "15.0.1.13011-1"
},
{
"status": "affected",
"version": "15.0.1.13012-1"
},
{
"status": "affected",
"version": "15.0.1.13013-1"
},
{
"status": "affected",
"version": "15.0.1.13014-1"
},
{
"status": "affected",
"version": "15.0.1.13015-1"
},
{
"status": "affected",
"version": "15.0.1.13016-1"
},
{
"status": "affected",
"version": "15.0.1.13017-1"
},
{
"status": "affected",
"version": "15SU3a"
},
{
"status": "affected",
"version": "14SU5"
},
{
"status": "affected",
"version": "15SU4"
},
{
"status": "affected",
"version": "15SU4a"
},
{
"status": "affected",
"version": "14SU6"
}
]
},
{
"defaultStatus": "unknown",
"product": "Cisco Unified Communications Manager IM and Presence Service",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "14"
},
{
"status": "affected",
"version": "14SU1"
},
{
"status": "affected",
"version": "14SU2"
},
{
"status": "affected",
"version": "14SU2a"
},
{
"status": "affected",
"version": "14SU3"
},
{
"status": "affected",
"version": "15"
},
{
"status": "affected",
"version": "15SU1"
},
{
"status": "affected",
"version": "14SU4"
},
{
"status": "affected",
"version": "15SU2"
},
{
"status": "affected",
"version": "15SU3"
},
{
"status": "affected",
"version": "14SU5"
},
{
"status": "affected",
"version": "15SU4"
},
{
"status": "affected",
"version": "14SU6"
}
]
},
{
"defaultStatus": "unknown",
"product": "Cisco Unity Connection",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "14"
},
{
"status": "affected",
"version": "14SU1"
},
{
"status": "affected",
"version": "14SU2"
},
{
"status": "affected",
"version": "14SU3"
},
{
"status": "affected",
"version": "14SU3a"
},
{
"status": "affected",
"version": "15"
},
{
"status": "affected",
"version": "15SU1"
},
{
"status": "affected",
"version": "14SU4"
},
{
"status": "affected",
"version": "15SU2"
},
{
"status": "affected",
"version": "15SU3"
},
{
"status": "affected",
"version": "14SU5"
},
{
"status": "affected",
"version": "15SU4"
},
{
"status": "affected",
"version": "14SU6"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "As part of Cisco\u0027s ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM \u0026amp; Presence Service (Unified CM IM\u0026amp;P), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unity Connection have conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.\r\n\r\nThe vulnerabilities tracked by CVE-2026-76479 are related to issues concerning improper limitation of a pathname to a restricted directory that are grouped under the Common Weakness Enumeration (CWE) Base CWE-22."
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-22",
"description": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-21T16:15:55.144Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-voice-hardening-twgbH9e3",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-voice-hardening-twgbH9e3"
}
],
"source": {
"advisory": "cisco-sa-voice-hardening-twgbH9e3",
"defects": [
"CSCwv22249"
],
"discovery": "INTERNAL"
},
"title": "Cisco Unified Communications Products Hardening Release: October 2026 - Path Traversal Vulnerabilities"
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2026-76479",
"datePublished": "2026-10-21T16:15:55.144Z",
"dateReserved": "2026-08-19T12:02:03.639Z",
"dateUpdated": "2026-11-07T17:29:43.127Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-76478 (GCVE-0-2026-76478)
Vulnerability from cvelistv5 – Published: 2026-10-21 16:15 – Updated: 2026-11-07 17:29
VLAI
EPSS
VEX
CVE Program bundle warning
The CVE Program recognizes that this CVE Record provides vulnerability information that a Supplier CNA believes is very important to consumers. The CVE Program has flagged this CVE Record as it assigns a single CVE ID to a collection of individual vulnerabilities which does not align with CVE's "one vulnerability, one ID" principle, and therefore provides incomplete information. For further clarification, please see the CVE Program's blog, "Preserving Vulnerability-Level Identification" linked below. Details within the CNA container below are viewable by clicking on the CNA name.
https://www.cve.org/Media/News/item/blog/2026/06/…Title
Cisco Unified Communications Products Hardening Release: October 2026 - Improper Access Control Vulnerabilities
Summary
As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unity Connection have conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.
The vulnerabilities tracked by CVE-2026-76478 are related to improper access control issues that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-284.
Severity
8.8 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-21 00:00 UTC
CWE
- CWE-284 - Improper Access Control
Assigner
cisco
CNA
References
1 reference
Impacted products
4 products
| Vendor | Product | Version | |
|---|---|---|---|
| Cisco | Cisco Emergency Responder |
Affected:
14
Affected: 14SU1 Affected: 14SU2 Affected: 14SU3 Affected: 14SU3a Affected: 15 Affected: 15SU1 Affected: 15SU1a Affected: 14SU4 Affected: 15SU2 Affected: 15SU3 Affected: 14SU5 Affected: 15SU4 Affected: 14SU6 |
|
| Cisco | Cisco Unified Communications Manager |
Affected:
14
Affected: 14SU1 Affected: 14SU2 Affected: 14SU3 Affected: 15 Affected: 15SU1 Affected: 14SU4 Affected: 14SU4a Affected: 15SU1a Affected: 15SU2 Affected: 15.0.1.13010-1 Affected: 15.0.1.13011-1 Affected: 15.0.1.13012-1 Affected: 15.0.1.13013-1 Affected: 15.0.1.13014-1 Affected: 15.0.1.13015-1 Affected: 15.0.1.13016-1 Affected: 15.0.1.13017-1 Affected: 15SU3a Affected: 14SU5 Affected: 15SU4 Affected: 15SU4a Affected: 14SU6 |
|
| Cisco | Cisco Unified Communications Manager IM and Presence Service |
Affected:
14
Affected: 14SU1 Affected: 14SU2 Affected: 14SU2a Affected: 14SU3 Affected: 15 Affected: 15SU1 Affected: 14SU4 Affected: 15SU2 Affected: 15SU3 Affected: 14SU5 Affected: 15SU4 Affected: 14SU6 |
|
| Cisco | Cisco Unity Connection |
Affected:
14
Affected: 14SU1 Affected: 14SU2 Affected: 14SU3 Affected: 14SU3a Affected: 15 Affected: 15SU1 Affected: 14SU4 Affected: 15SU2 Affected: 15SU3 Affected: 14SU5 Affected: 15SU4 Affected: 14SU6 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-76478",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-21T00:00:00+00:00",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-22T23:04:35.404Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"descriptions": [
{
"lang": "en",
"value": "The CVE Program recognizes that this CVE Record provides vulnerability information that a Supplier CNA believes is very important to consumers. The CVE Program has flagged this CVE Record as it assigns a single CVE ID to a collection of individual vulnerabilities which does not align with CVE\u0027s \"one vulnerability, one ID\" principle, and therefore provides incomplete information. For further clarification, please see the CVE Program\u0027s blog, \"Preserving Vulnerability-Level Identification\" linked below. Details within the CNA container below are viewable by clicking on the CNA name."
}
],
"providerMetadata": {
"dateUpdated": "2026-11-07T17:29:42.771Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"url": "https://www.cve.org/Media/News/item/blog/2026/06/16/Preserving-Vulnerability-Level-Identification"
}
],
"tags": [
"x_bundling-flagged-by-CVE-Program"
]
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Cisco Emergency Responder",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "14"
},
{
"status": "affected",
"version": "14SU1"
},
{
"status": "affected",
"version": "14SU2"
},
{
"status": "affected",
"version": "14SU3"
},
{
"status": "affected",
"version": "14SU3a"
},
{
"status": "affected",
"version": "15"
},
{
"status": "affected",
"version": "15SU1"
},
{
"status": "affected",
"version": "15SU1a"
},
{
"status": "affected",
"version": "14SU4"
},
{
"status": "affected",
"version": "15SU2"
},
{
"status": "affected",
"version": "15SU3"
},
{
"status": "affected",
"version": "14SU5"
},
{
"status": "affected",
"version": "15SU4"
},
{
"status": "affected",
"version": "14SU6"
}
]
},
{
"defaultStatus": "unknown",
"product": "Cisco Unified Communications Manager",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "14"
},
{
"status": "affected",
"version": "14SU1"
},
{
"status": "affected",
"version": "14SU2"
},
{
"status": "affected",
"version": "14SU3"
},
{
"status": "affected",
"version": "15"
},
{
"status": "affected",
"version": "15SU1"
},
{
"status": "affected",
"version": "14SU4"
},
{
"status": "affected",
"version": "14SU4a"
},
{
"status": "affected",
"version": "15SU1a"
},
{
"status": "affected",
"version": "15SU2"
},
{
"status": "affected",
"version": "15.0.1.13010-1"
},
{
"status": "affected",
"version": "15.0.1.13011-1"
},
{
"status": "affected",
"version": "15.0.1.13012-1"
},
{
"status": "affected",
"version": "15.0.1.13013-1"
},
{
"status": "affected",
"version": "15.0.1.13014-1"
},
{
"status": "affected",
"version": "15.0.1.13015-1"
},
{
"status": "affected",
"version": "15.0.1.13016-1"
},
{
"status": "affected",
"version": "15.0.1.13017-1"
},
{
"status": "affected",
"version": "15SU3a"
},
{
"status": "affected",
"version": "14SU5"
},
{
"status": "affected",
"version": "15SU4"
},
{
"status": "affected",
"version": "15SU4a"
},
{
"status": "affected",
"version": "14SU6"
}
]
},
{
"defaultStatus": "unknown",
"product": "Cisco Unified Communications Manager IM and Presence Service",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "14"
},
{
"status": "affected",
"version": "14SU1"
},
{
"status": "affected",
"version": "14SU2"
},
{
"status": "affected",
"version": "14SU2a"
},
{
"status": "affected",
"version": "14SU3"
},
{
"status": "affected",
"version": "15"
},
{
"status": "affected",
"version": "15SU1"
},
{
"status": "affected",
"version": "14SU4"
},
{
"status": "affected",
"version": "15SU2"
},
{
"status": "affected",
"version": "15SU3"
},
{
"status": "affected",
"version": "14SU5"
},
{
"status": "affected",
"version": "15SU4"
},
{
"status": "affected",
"version": "14SU6"
}
]
},
{
"defaultStatus": "unknown",
"product": "Cisco Unity Connection",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "14"
},
{
"status": "affected",
"version": "14SU1"
},
{
"status": "affected",
"version": "14SU2"
},
{
"status": "affected",
"version": "14SU3"
},
{
"status": "affected",
"version": "14SU3a"
},
{
"status": "affected",
"version": "15"
},
{
"status": "affected",
"version": "15SU1"
},
{
"status": "affected",
"version": "14SU4"
},
{
"status": "affected",
"version": "15SU2"
},
{
"status": "affected",
"version": "15SU3"
},
{
"status": "affected",
"version": "14SU5"
},
{
"status": "affected",
"version": "15SU4"
},
{
"status": "affected",
"version": "14SU6"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "As part of Cisco\u0027s ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM \u0026amp; Presence Service (Unified CM IM\u0026amp;P), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unity Connection have conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.\r\n\r\nThe vulnerabilities tracked by CVE-2026-76478 are related to improper access control issues that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-284."
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-284",
"description": "Improper Access Control",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-21T16:15:47.937Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-voice-hardening-twgbH9e3",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-voice-hardening-twgbH9e3"
}
],
"source": {
"advisory": "cisco-sa-voice-hardening-twgbH9e3",
"defects": [
"CSCwu82039"
],
"discovery": "INTERNAL"
},
"title": "Cisco Unified Communications Products Hardening Release: October 2026 - Improper Access Control Vulnerabilities"
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2026-76478",
"datePublished": "2026-10-21T16:15:47.937Z",
"dateReserved": "2026-08-19T12:02:03.639Z",
"dateUpdated": "2026-11-07T17:29:42.771Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-76476 (GCVE-0-2026-76476)
Vulnerability from cvelistv5 – Published: 2026-10-21 16:15 – Updated: 2026-11-07 17:29
VLAI
EPSS
VEX
CVE Program bundle warning
The CVE Program recognizes that this CVE Record provides vulnerability information that a Supplier CNA believes is very important to consumers. The CVE Program has flagged this CVE Record as it assigns a single CVE ID to a collection of individual vulnerabilities which does not align with CVE's "one vulnerability, one ID" principle, and therefore provides incomplete information. For further clarification, please see the CVE Program's blog, "Preserving Vulnerability-Level Identification" linked below. Details within the CNA container below are viewable by clicking on the CNA name.
https://www.cve.org/Media/News/item/blog/2026/06/…Title
Cisco Unified Communications Products Hardening Release: October 2026 - Improper Input Validation Vulnerabilities
Summary
As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unity Connection have conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.
The vulnerabilities tracked by CVE-2026-76476 are related to issues concerning improper input validation that are grouped under the Common Weakness Enumeration (CWE) Class CWE-20.
Severity
8.8 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-21 00:00 UTC
CWE
- CWE-20 - Improper Input Validation
Assigner
cisco
CNA
References
1 reference
Impacted products
4 products
| Vendor | Product | Version | |
|---|---|---|---|
| Cisco | Cisco Emergency Responder |
Affected:
14
Affected: 14SU1 Affected: 14SU2 Affected: 14SU3 Affected: 14SU3a Affected: 15 Affected: 15SU1 Affected: 15SU1a Affected: 14SU4 Affected: 15SU2 Affected: 15SU3 Affected: 14SU5 Affected: 15SU4 Affected: 14SU6 |
|
| Cisco | Cisco Unified Communications Manager |
Affected:
14
Affected: 14SU1 Affected: 14SU2 Affected: 14SU3 Affected: 15 Affected: 15SU1 Affected: 14SU4 Affected: 14SU4a Affected: 15SU1a Affected: 15SU2 Affected: 15.0.1.13010-1 Affected: 15.0.1.13011-1 Affected: 15.0.1.13012-1 Affected: 15.0.1.13013-1 Affected: 15.0.1.13014-1 Affected: 15.0.1.13015-1 Affected: 15.0.1.13016-1 Affected: 15.0.1.13017-1 Affected: 15SU3a Affected: 14SU5 Affected: 15SU4 Affected: 15SU4a Affected: 14SU6 |
|
| Cisco | Cisco Unified Communications Manager IM and Presence Service |
Affected:
14
Affected: 14SU1 Affected: 14SU2 Affected: 14SU2a Affected: 14SU3 Affected: 15 Affected: 15SU1 Affected: 14SU4 Affected: 15SU2 Affected: 15SU3 Affected: 14SU5 Affected: 15SU4 Affected: 14SU6 |
|
| Cisco | Cisco Unity Connection |
Affected:
14
Affected: 14SU1 Affected: 14SU2 Affected: 14SU3 Affected: 14SU3a Affected: 15 Affected: 15SU1 Affected: 14SU4 Affected: 15SU2 Affected: 15SU3 Affected: 14SU5 Affected: 15SU4 Affected: 14SU6 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-76476",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-21T00:00:00+00:00",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-22T23:04:33.640Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"descriptions": [
{
"lang": "en",
"value": "The CVE Program recognizes that this CVE Record provides vulnerability information that a Supplier CNA believes is very important to consumers. The CVE Program has flagged this CVE Record as it assigns a single CVE ID to a collection of individual vulnerabilities which does not align with CVE\u0027s \"one vulnerability, one ID\" principle, and therefore provides incomplete information. For further clarification, please see the CVE Program\u0027s blog, \"Preserving Vulnerability-Level Identification\" linked below. Details within the CNA container below are viewable by clicking on the CNA name."
}
],
"providerMetadata": {
"dateUpdated": "2026-11-07T17:29:42.554Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"url": "https://www.cve.org/Media/News/item/blog/2026/06/16/Preserving-Vulnerability-Level-Identification"
}
],
"tags": [
"x_bundling-flagged-by-CVE-Program"
]
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Cisco Emergency Responder",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "14"
},
{
"status": "affected",
"version": "14SU1"
},
{
"status": "affected",
"version": "14SU2"
},
{
"status": "affected",
"version": "14SU3"
},
{
"status": "affected",
"version": "14SU3a"
},
{
"status": "affected",
"version": "15"
},
{
"status": "affected",
"version": "15SU1"
},
{
"status": "affected",
"version": "15SU1a"
},
{
"status": "affected",
"version": "14SU4"
},
{
"status": "affected",
"version": "15SU2"
},
{
"status": "affected",
"version": "15SU3"
},
{
"status": "affected",
"version": "14SU5"
},
{
"status": "affected",
"version": "15SU4"
},
{
"status": "affected",
"version": "14SU6"
}
]
},
{
"defaultStatus": "unknown",
"product": "Cisco Unified Communications Manager",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "14"
},
{
"status": "affected",
"version": "14SU1"
},
{
"status": "affected",
"version": "14SU2"
},
{
"status": "affected",
"version": "14SU3"
},
{
"status": "affected",
"version": "15"
},
{
"status": "affected",
"version": "15SU1"
},
{
"status": "affected",
"version": "14SU4"
},
{
"status": "affected",
"version": "14SU4a"
},
{
"status": "affected",
"version": "15SU1a"
},
{
"status": "affected",
"version": "15SU2"
},
{
"status": "affected",
"version": "15.0.1.13010-1"
},
{
"status": "affected",
"version": "15.0.1.13011-1"
},
{
"status": "affected",
"version": "15.0.1.13012-1"
},
{
"status": "affected",
"version": "15.0.1.13013-1"
},
{
"status": "affected",
"version": "15.0.1.13014-1"
},
{
"status": "affected",
"version": "15.0.1.13015-1"
},
{
"status": "affected",
"version": "15.0.1.13016-1"
},
{
"status": "affected",
"version": "15.0.1.13017-1"
},
{
"status": "affected",
"version": "15SU3a"
},
{
"status": "affected",
"version": "14SU5"
},
{
"status": "affected",
"version": "15SU4"
},
{
"status": "affected",
"version": "15SU4a"
},
{
"status": "affected",
"version": "14SU6"
}
]
},
{
"defaultStatus": "unknown",
"product": "Cisco Unified Communications Manager IM and Presence Service",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "14"
},
{
"status": "affected",
"version": "14SU1"
},
{
"status": "affected",
"version": "14SU2"
},
{
"status": "affected",
"version": "14SU2a"
},
{
"status": "affected",
"version": "14SU3"
},
{
"status": "affected",
"version": "15"
},
{
"status": "affected",
"version": "15SU1"
},
{
"status": "affected",
"version": "14SU4"
},
{
"status": "affected",
"version": "15SU2"
},
{
"status": "affected",
"version": "15SU3"
},
{
"status": "affected",
"version": "14SU5"
},
{
"status": "affected",
"version": "15SU4"
},
{
"status": "affected",
"version": "14SU6"
}
]
},
{
"defaultStatus": "unknown",
"product": "Cisco Unity Connection",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "14"
},
{
"status": "affected",
"version": "14SU1"
},
{
"status": "affected",
"version": "14SU2"
},
{
"status": "affected",
"version": "14SU3"
},
{
"status": "affected",
"version": "14SU3a"
},
{
"status": "affected",
"version": "15"
},
{
"status": "affected",
"version": "15SU1"
},
{
"status": "affected",
"version": "14SU4"
},
{
"status": "affected",
"version": "15SU2"
},
{
"status": "affected",
"version": "15SU3"
},
{
"status": "affected",
"version": "14SU5"
},
{
"status": "affected",
"version": "15SU4"
},
{
"status": "affected",
"version": "14SU6"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "As part of Cisco\u0027s ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM \u0026amp; Presence Service (Unified CM IM\u0026amp;P), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unity Connection have conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. \u0026nbsp;\r\n\r\nThe vulnerabilities tracked by CVE-2026-76476 are related to issues concerning improper input validation that are grouped under the Common Weakness Enumeration (CWE) Class CWE-20."
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-20",
"description": "Improper Input Validation",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-21T16:15:26.245Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-voice-hardening-twgbH9e3",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-voice-hardening-twgbH9e3"
}
],
"source": {
"advisory": "cisco-sa-voice-hardening-twgbH9e3",
"defects": [
"CSCwu75312"
],
"discovery": "INTERNAL"
},
"title": "Cisco Unified Communications Products Hardening Release: October 2026 - Improper Input Validation Vulnerabilities"
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2026-76476",
"datePublished": "2026-10-21T16:15:26.245Z",
"dateReserved": "2026-08-19T12:02:03.638Z",
"dateUpdated": "2026-11-07T17:29:42.554Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-76477 (GCVE-0-2026-76477)
Vulnerability from cvelistv5 – Published: 2026-10-21 16:15 – Updated: 2026-11-07 17:29
VLAI
EPSS
VEX
CVE Program bundle warning
The CVE Program recognizes that this CVE Record provides vulnerability information that a Supplier CNA believes is very important to consumers. The CVE Program has flagged this CVE Record as it assigns a single CVE ID to a collection of individual vulnerabilities which does not align with CVE's "one vulnerability, one ID" principle, and therefore provides incomplete information. For further clarification, please see the CVE Program's blog, "Preserving Vulnerability-Level Identification" linked below. Details within the CNA container below are viewable by clicking on the CNA name.
https://www.cve.org/Media/News/item/blog/2026/06/…Title
Cisco Unified Communications Products Hardening Release: October 2026 - Injection Vulnerabilities
Summary
As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unity Connection have conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.
The vulnerabilities tracked by CVE-2026-76477 are related to issues concerning improper neutralization of special elements used in an SQL command that are grouped under the Common Weakness Enumeration (CWE) Base CWE-89.
Severity
8.8 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-21 00:00 UTC
CWE
- CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Assigner
cisco
CNA
References
1 reference
Impacted products
4 products
| Vendor | Product | Version | |
|---|---|---|---|
| Cisco | Cisco Emergency Responder |
Affected:
14
Affected: 14SU1 Affected: 14SU2 Affected: 14SU3 Affected: 14SU3a Affected: 15 Affected: 15SU1 Affected: 15SU1a Affected: 14SU4 Affected: 15SU2 Affected: 15SU3 Affected: 14SU5 Affected: 15SU4 Affected: 14SU6 |
|
| Cisco | Cisco Unified Communications Manager |
Affected:
14
Affected: 14SU1 Affected: 14SU2 Affected: 14SU3 Affected: 15 Affected: 15SU1 Affected: 14SU4 Affected: 14SU4a Affected: 15SU1a Affected: 15SU2 Affected: 15.0.1.13010-1 Affected: 15.0.1.13011-1 Affected: 15.0.1.13012-1 Affected: 15.0.1.13013-1 Affected: 15.0.1.13014-1 Affected: 15.0.1.13015-1 Affected: 15.0.1.13016-1 Affected: 15.0.1.13017-1 Affected: 15SU3a Affected: 14SU5 Affected: 15SU4 Affected: 15SU4a Affected: 14SU6 |
|
| Cisco | Cisco Unified Communications Manager IM and Presence Service |
Affected:
14
Affected: 14SU1 Affected: 14SU2 Affected: 14SU2a Affected: 14SU3 Affected: 15 Affected: 15SU1 Affected: 14SU4 Affected: 15SU2 Affected: 15SU3 Affected: 14SU5 Affected: 15SU4 Affected: 14SU6 |
|
| Cisco | Cisco Unity Connection |
Affected:
14
Affected: 14SU1 Affected: 14SU2 Affected: 14SU3 Affected: 14SU3a Affected: 15 Affected: 15SU1 Affected: 14SU4 Affected: 15SU2 Affected: 15SU3 Affected: 14SU5 Affected: 15SU4 Affected: 14SU6 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-76477",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-21T00:00:00+00:00",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-22T23:04:34.580Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"descriptions": [
{
"lang": "en",
"value": "The CVE Program recognizes that this CVE Record provides vulnerability information that a Supplier CNA believes is very important to consumers. The CVE Program has flagged this CVE Record as it assigns a single CVE ID to a collection of individual vulnerabilities which does not align with CVE\u0027s \"one vulnerability, one ID\" principle, and therefore provides incomplete information. For further clarification, please see the CVE Program\u0027s blog, \"Preserving Vulnerability-Level Identification\" linked below. Details within the CNA container below are viewable by clicking on the CNA name."
}
],
"providerMetadata": {
"dateUpdated": "2026-11-07T17:29:42.655Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"url": "https://www.cve.org/Media/News/item/blog/2026/06/16/Preserving-Vulnerability-Level-Identification"
}
],
"tags": [
"x_bundling-flagged-by-CVE-Program"
]
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Cisco Emergency Responder",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "14"
},
{
"status": "affected",
"version": "14SU1"
},
{
"status": "affected",
"version": "14SU2"
},
{
"status": "affected",
"version": "14SU3"
},
{
"status": "affected",
"version": "14SU3a"
},
{
"status": "affected",
"version": "15"
},
{
"status": "affected",
"version": "15SU1"
},
{
"status": "affected",
"version": "15SU1a"
},
{
"status": "affected",
"version": "14SU4"
},
{
"status": "affected",
"version": "15SU2"
},
{
"status": "affected",
"version": "15SU3"
},
{
"status": "affected",
"version": "14SU5"
},
{
"status": "affected",
"version": "15SU4"
},
{
"status": "affected",
"version": "14SU6"
}
]
},
{
"defaultStatus": "unknown",
"product": "Cisco Unified Communications Manager",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "14"
},
{
"status": "affected",
"version": "14SU1"
},
{
"status": "affected",
"version": "14SU2"
},
{
"status": "affected",
"version": "14SU3"
},
{
"status": "affected",
"version": "15"
},
{
"status": "affected",
"version": "15SU1"
},
{
"status": "affected",
"version": "14SU4"
},
{
"status": "affected",
"version": "14SU4a"
},
{
"status": "affected",
"version": "15SU1a"
},
{
"status": "affected",
"version": "15SU2"
},
{
"status": "affected",
"version": "15.0.1.13010-1"
},
{
"status": "affected",
"version": "15.0.1.13011-1"
},
{
"status": "affected",
"version": "15.0.1.13012-1"
},
{
"status": "affected",
"version": "15.0.1.13013-1"
},
{
"status": "affected",
"version": "15.0.1.13014-1"
},
{
"status": "affected",
"version": "15.0.1.13015-1"
},
{
"status": "affected",
"version": "15.0.1.13016-1"
},
{
"status": "affected",
"version": "15.0.1.13017-1"
},
{
"status": "affected",
"version": "15SU3a"
},
{
"status": "affected",
"version": "14SU5"
},
{
"status": "affected",
"version": "15SU4"
},
{
"status": "affected",
"version": "15SU4a"
},
{
"status": "affected",
"version": "14SU6"
}
]
},
{
"defaultStatus": "unknown",
"product": "Cisco Unified Communications Manager IM and Presence Service",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "14"
},
{
"status": "affected",
"version": "14SU1"
},
{
"status": "affected",
"version": "14SU2"
},
{
"status": "affected",
"version": "14SU2a"
},
{
"status": "affected",
"version": "14SU3"
},
{
"status": "affected",
"version": "15"
},
{
"status": "affected",
"version": "15SU1"
},
{
"status": "affected",
"version": "14SU4"
},
{
"status": "affected",
"version": "15SU2"
},
{
"status": "affected",
"version": "15SU3"
},
{
"status": "affected",
"version": "14SU5"
},
{
"status": "affected",
"version": "15SU4"
},
{
"status": "affected",
"version": "14SU6"
}
]
},
{
"defaultStatus": "unknown",
"product": "Cisco Unity Connection",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "14"
},
{
"status": "affected",
"version": "14SU1"
},
{
"status": "affected",
"version": "14SU2"
},
{
"status": "affected",
"version": "14SU3"
},
{
"status": "affected",
"version": "14SU3a"
},
{
"status": "affected",
"version": "15"
},
{
"status": "affected",
"version": "15SU1"
},
{
"status": "affected",
"version": "14SU4"
},
{
"status": "affected",
"version": "15SU2"
},
{
"status": "affected",
"version": "15SU3"
},
{
"status": "affected",
"version": "14SU5"
},
{
"status": "affected",
"version": "15SU4"
},
{
"status": "affected",
"version": "14SU6"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "As part of Cisco\u0027s ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM \u0026amp; Presence Service (Unified CM IM\u0026amp;P), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unity Connection have conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.\r\n\r\nThe vulnerabilities tracked by CVE-2026-76477 are related to issues concerning improper neutralization of special elements used in an SQL command that are grouped under the Common Weakness Enumeration (CWE) Base CWE-89."
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-89",
"description": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-21T16:15:11.874Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-voice-hardening-twgbH9e3",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-voice-hardening-twgbH9e3"
}
],
"source": {
"advisory": "cisco-sa-voice-hardening-twgbH9e3",
"defects": [
"CSCwu78793"
],
"discovery": "INTERNAL"
},
"title": "Cisco Unified Communications Products Hardening Release: October 2026 - Injection Vulnerabilities"
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2026-76477",
"datePublished": "2026-10-21T16:15:11.874Z",
"dateReserved": "2026-08-19T12:02:03.639Z",
"dateUpdated": "2026-11-07T17:29:42.655Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-76475 (GCVE-0-2026-76475)
Vulnerability from cvelistv5 – Published: 2026-10-21 16:14 – Updated: 2026-11-07 17:29
VLAI
EPSS
VEX
CVE Program bundle warning
The CVE Program recognizes that this CVE Record provides vulnerability information that a Supplier CNA believes is very important to consumers. The CVE Program has flagged this CVE Record as it assigns a single CVE ID to a collection of individual vulnerabilities which does not align with CVE's "one vulnerability, one ID" principle, and therefore provides incomplete information. For further clarification, please see the CVE Program's blog, "Preserving Vulnerability-Level Identification" linked below. Details within the CNA container below are viewable by clicking on the CNA name.
https://www.cve.org/Media/News/item/blog/2026/06/…Title
Cisco Unified Communications Products Hardening Release: October 2026 - Cross-site Scripting Vulnerabilities
Summary
As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unity Connection have conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.
The vulnerabilities tracked by CVE-2026-76475 are related to issues concerning improper neutralization of input during web page generation that are grouped under the Common Weakness Enumeration (CWE) Base CWE-79.
Severity
9.3 (Critical)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-21 17:16 UTC
CWE
- CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Assigner
cisco
CNA
References
1 reference
Impacted products
4 products
| Vendor | Product | Version | |
|---|---|---|---|
| Cisco | Cisco Emergency Responder |
Affected:
14
Affected: 14SU1 Affected: 14SU2 Affected: 14SU3 Affected: 14SU3a Affected: 15 Affected: 15SU1 Affected: 15SU1a Affected: 14SU4 Affected: 15SU2 Affected: 15SU3 Affected: 14SU5 Affected: 15SU4 Affected: 14SU6 |
|
| Cisco | Cisco Unified Communications Manager |
Affected:
14
Affected: 14SU1 Affected: 14SU2 Affected: 14SU3 Affected: 15 Affected: 15SU1 Affected: 14SU4 Affected: 14SU4a Affected: 15SU1a Affected: 15SU2 Affected: 15.0.1.13010-1 Affected: 15.0.1.13011-1 Affected: 15.0.1.13012-1 Affected: 15.0.1.13013-1 Affected: 15.0.1.13014-1 Affected: 15.0.1.13015-1 Affected: 15.0.1.13016-1 Affected: 15.0.1.13017-1 Affected: 15SU3a Affected: 14SU5 Affected: 15SU4 Affected: 15SU4a Affected: 14SU6 |
|
| Cisco | Cisco Unified Communications Manager IM and Presence Service |
Affected:
14
Affected: 14SU1 Affected: 14SU2 Affected: 14SU2a Affected: 14SU3 Affected: 15 Affected: 15SU1 Affected: 14SU4 Affected: 15SU2 Affected: 15SU3 Affected: 14SU5 Affected: 15SU4 Affected: 14SU6 |
|
| Cisco | Cisco Unity Connection |
Affected:
14
Affected: 14SU1 Affected: 14SU2 Affected: 14SU3 Affected: 14SU3a Affected: 15 Affected: 15SU1 Affected: 14SU4 Affected: 15SU2 Affected: 15SU3 Affected: 14SU5 Affected: 15SU4 Affected: 14SU6 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-76475",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-21T17:16:26.649898Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-22T13:37:54.322Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"descriptions": [
{
"lang": "en",
"value": "The CVE Program recognizes that this CVE Record provides vulnerability information that a Supplier CNA believes is very important to consumers. The CVE Program has flagged this CVE Record as it assigns a single CVE ID to a collection of individual vulnerabilities which does not align with CVE\u0027s \"one vulnerability, one ID\" principle, and therefore provides incomplete information. For further clarification, please see the CVE Program\u0027s blog, \"Preserving Vulnerability-Level Identification\" linked below. Details within the CNA container below are viewable by clicking on the CNA name."
}
],
"providerMetadata": {
"dateUpdated": "2026-11-07T17:29:42.452Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"url": "https://www.cve.org/Media/News/item/blog/2026/06/16/Preserving-Vulnerability-Level-Identification"
}
],
"tags": [
"x_bundling-flagged-by-CVE-Program"
]
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Cisco Emergency Responder",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "14"
},
{
"status": "affected",
"version": "14SU1"
},
{
"status": "affected",
"version": "14SU2"
},
{
"status": "affected",
"version": "14SU3"
},
{
"status": "affected",
"version": "14SU3a"
},
{
"status": "affected",
"version": "15"
},
{
"status": "affected",
"version": "15SU1"
},
{
"status": "affected",
"version": "15SU1a"
},
{
"status": "affected",
"version": "14SU4"
},
{
"status": "affected",
"version": "15SU2"
},
{
"status": "affected",
"version": "15SU3"
},
{
"status": "affected",
"version": "14SU5"
},
{
"status": "affected",
"version": "15SU4"
},
{
"status": "affected",
"version": "14SU6"
}
]
},
{
"defaultStatus": "unknown",
"product": "Cisco Unified Communications Manager",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "14"
},
{
"status": "affected",
"version": "14SU1"
},
{
"status": "affected",
"version": "14SU2"
},
{
"status": "affected",
"version": "14SU3"
},
{
"status": "affected",
"version": "15"
},
{
"status": "affected",
"version": "15SU1"
},
{
"status": "affected",
"version": "14SU4"
},
{
"status": "affected",
"version": "14SU4a"
},
{
"status": "affected",
"version": "15SU1a"
},
{
"status": "affected",
"version": "15SU2"
},
{
"status": "affected",
"version": "15.0.1.13010-1"
},
{
"status": "affected",
"version": "15.0.1.13011-1"
},
{
"status": "affected",
"version": "15.0.1.13012-1"
},
{
"status": "affected",
"version": "15.0.1.13013-1"
},
{
"status": "affected",
"version": "15.0.1.13014-1"
},
{
"status": "affected",
"version": "15.0.1.13015-1"
},
{
"status": "affected",
"version": "15.0.1.13016-1"
},
{
"status": "affected",
"version": "15.0.1.13017-1"
},
{
"status": "affected",
"version": "15SU3a"
},
{
"status": "affected",
"version": "14SU5"
},
{
"status": "affected",
"version": "15SU4"
},
{
"status": "affected",
"version": "15SU4a"
},
{
"status": "affected",
"version": "14SU6"
}
]
},
{
"defaultStatus": "unknown",
"product": "Cisco Unified Communications Manager IM and Presence Service",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "14"
},
{
"status": "affected",
"version": "14SU1"
},
{
"status": "affected",
"version": "14SU2"
},
{
"status": "affected",
"version": "14SU2a"
},
{
"status": "affected",
"version": "14SU3"
},
{
"status": "affected",
"version": "15"
},
{
"status": "affected",
"version": "15SU1"
},
{
"status": "affected",
"version": "14SU4"
},
{
"status": "affected",
"version": "15SU2"
},
{
"status": "affected",
"version": "15SU3"
},
{
"status": "affected",
"version": "14SU5"
},
{
"status": "affected",
"version": "15SU4"
},
{
"status": "affected",
"version": "14SU6"
}
]
},
{
"defaultStatus": "unknown",
"product": "Cisco Unity Connection",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "14"
},
{
"status": "affected",
"version": "14SU1"
},
{
"status": "affected",
"version": "14SU2"
},
{
"status": "affected",
"version": "14SU3"
},
{
"status": "affected",
"version": "14SU3a"
},
{
"status": "affected",
"version": "15"
},
{
"status": "affected",
"version": "15SU1"
},
{
"status": "affected",
"version": "14SU4"
},
{
"status": "affected",
"version": "15SU2"
},
{
"status": "affected",
"version": "15SU3"
},
{
"status": "affected",
"version": "14SU5"
},
{
"status": "affected",
"version": "15SU4"
},
{
"status": "affected",
"version": "14SU6"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "As part of Cisco\u0027s ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM \u0026amp; Presence Service (Unified CM IM\u0026amp;P), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unity Connection have conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.\r\n\r\nThe vulnerabilities tracked by CVE-2026-76475 are related to issues concerning improper neutralization of input during web page generation that are grouped under the Common Weakness Enumeration (CWE) Base CWE-79."
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.3,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-79",
"description": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-21T16:14:55.752Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-voice-hardening-twgbH9e3",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-voice-hardening-twgbH9e3"
}
],
"source": {
"advisory": "cisco-sa-voice-hardening-twgbH9e3",
"defects": [
"CSCwv45199"
],
"discovery": "INTERNAL"
},
"title": "Cisco Unified Communications Products Hardening Release: October 2026 - Cross-site Scripting Vulnerabilities"
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2026-76475",
"datePublished": "2026-10-21T16:14:55.752Z",
"dateReserved": "2026-08-19T12:02:03.638Z",
"dateUpdated": "2026-11-07T17:29:42.452Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-76474 (GCVE-0-2026-76474)
Vulnerability from cvelistv5 – Published: 2026-10-21 16:14 – Updated: 2026-11-07 17:29
VLAI
EPSS
VEX
CVE Program bundle warning
The CVE Program recognizes that this CVE Record provides vulnerability information that a Supplier CNA believes is very important to consumers. The CVE Program has flagged this CVE Record as it assigns a single CVE ID to a collection of individual vulnerabilities which does not align with CVE's "one vulnerability, one ID" principle, and therefore provides incomplete information. For further clarification, please see the CVE Program's blog, "Preserving Vulnerability-Level Identification" linked below. Details within the CNA container below are viewable by clicking on the CNA name.
https://www.cve.org/Media/News/item/blog/2026/06/…Title
Cisco Unified Communications Products Hardening Release: October 2026 - Improper Authentication Vulnerabilities
Summary
As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unity Connection have conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.
The vulnerabilities tracked by CVE-2026-76474 are related to issues concerning improper authentication that are grouped under the Common Weakness Enumeration (CWE) Class CWE-287.
Severity
9.8 (Critical)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-21 00:00 UTC
CWE
- CWE-287 - Improper Authentication
Assigner
cisco
CNA
References
1 reference
Impacted products
4 products
| Vendor | Product | Version | |
|---|---|---|---|
| Cisco | Cisco Emergency Responder |
Affected:
14
Affected: 14SU1 Affected: 14SU2 Affected: 14SU3 Affected: 14SU3a Affected: 15 Affected: 15SU1 Affected: 15SU1a Affected: 14SU4 Affected: 15SU2 Affected: 15SU3 Affected: 14SU5 Affected: 15SU4 Affected: 14SU6 |
|
| Cisco | Cisco Unified Communications Manager |
Affected:
14
Affected: 14SU1 Affected: 14SU2 Affected: 14SU3 Affected: 15 Affected: 15SU1 Affected: 14SU4 Affected: 14SU4a Affected: 15SU1a Affected: 15SU2 Affected: 15.0.1.13010-1 Affected: 15.0.1.13011-1 Affected: 15.0.1.13012-1 Affected: 15.0.1.13013-1 Affected: 15.0.1.13014-1 Affected: 15.0.1.13015-1 Affected: 15.0.1.13016-1 Affected: 15.0.1.13017-1 Affected: 15SU3a Affected: 14SU5 Affected: 15SU4 Affected: 15SU4a Affected: 14SU6 |
|
| Cisco | Cisco Unified Communications Manager IM and Presence Service |
Affected:
14
Affected: 14SU1 Affected: 14SU2 Affected: 14SU2a Affected: 14SU3 Affected: 15 Affected: 15SU1 Affected: 14SU4 Affected: 15SU2 Affected: 15SU3 Affected: 14SU5 Affected: 15SU4 Affected: 14SU6 |
|
| Cisco | Cisco Unity Connection |
Affected:
14
Affected: 14SU1 Affected: 14SU2 Affected: 14SU3 Affected: 14SU3a Affected: 15 Affected: 15SU1 Affected: 14SU4 Affected: 15SU2 Affected: 15SU3 Affected: 14SU5 Affected: 15SU4 Affected: 14SU6 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-76474",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-21T00:00:00+00:00",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-22T23:04:32.719Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"descriptions": [
{
"lang": "en",
"value": "The CVE Program recognizes that this CVE Record provides vulnerability information that a Supplier CNA believes is very important to consumers. The CVE Program has flagged this CVE Record as it assigns a single CVE ID to a collection of individual vulnerabilities which does not align with CVE\u0027s \"one vulnerability, one ID\" principle, and therefore provides incomplete information. For further clarification, please see the CVE Program\u0027s blog, \"Preserving Vulnerability-Level Identification\" linked below. Details within the CNA container below are viewable by clicking on the CNA name."
}
],
"providerMetadata": {
"dateUpdated": "2026-11-07T17:29:42.347Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"url": "https://www.cve.org/Media/News/item/blog/2026/06/16/Preserving-Vulnerability-Level-Identification"
}
],
"tags": [
"x_bundling-flagged-by-CVE-Program"
]
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Cisco Emergency Responder",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "14"
},
{
"status": "affected",
"version": "14SU1"
},
{
"status": "affected",
"version": "14SU2"
},
{
"status": "affected",
"version": "14SU3"
},
{
"status": "affected",
"version": "14SU3a"
},
{
"status": "affected",
"version": "15"
},
{
"status": "affected",
"version": "15SU1"
},
{
"status": "affected",
"version": "15SU1a"
},
{
"status": "affected",
"version": "14SU4"
},
{
"status": "affected",
"version": "15SU2"
},
{
"status": "affected",
"version": "15SU3"
},
{
"status": "affected",
"version": "14SU5"
},
{
"status": "affected",
"version": "15SU4"
},
{
"status": "affected",
"version": "14SU6"
}
]
},
{
"defaultStatus": "unknown",
"product": "Cisco Unified Communications Manager",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "14"
},
{
"status": "affected",
"version": "14SU1"
},
{
"status": "affected",
"version": "14SU2"
},
{
"status": "affected",
"version": "14SU3"
},
{
"status": "affected",
"version": "15"
},
{
"status": "affected",
"version": "15SU1"
},
{
"status": "affected",
"version": "14SU4"
},
{
"status": "affected",
"version": "14SU4a"
},
{
"status": "affected",
"version": "15SU1a"
},
{
"status": "affected",
"version": "15SU2"
},
{
"status": "affected",
"version": "15.0.1.13010-1"
},
{
"status": "affected",
"version": "15.0.1.13011-1"
},
{
"status": "affected",
"version": "15.0.1.13012-1"
},
{
"status": "affected",
"version": "15.0.1.13013-1"
},
{
"status": "affected",
"version": "15.0.1.13014-1"
},
{
"status": "affected",
"version": "15.0.1.13015-1"
},
{
"status": "affected",
"version": "15.0.1.13016-1"
},
{
"status": "affected",
"version": "15.0.1.13017-1"
},
{
"status": "affected",
"version": "15SU3a"
},
{
"status": "affected",
"version": "14SU5"
},
{
"status": "affected",
"version": "15SU4"
},
{
"status": "affected",
"version": "15SU4a"
},
{
"status": "affected",
"version": "14SU6"
}
]
},
{
"defaultStatus": "unknown",
"product": "Cisco Unified Communications Manager IM and Presence Service",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "14"
},
{
"status": "affected",
"version": "14SU1"
},
{
"status": "affected",
"version": "14SU2"
},
{
"status": "affected",
"version": "14SU2a"
},
{
"status": "affected",
"version": "14SU3"
},
{
"status": "affected",
"version": "15"
},
{
"status": "affected",
"version": "15SU1"
},
{
"status": "affected",
"version": "14SU4"
},
{
"status": "affected",
"version": "15SU2"
},
{
"status": "affected",
"version": "15SU3"
},
{
"status": "affected",
"version": "14SU5"
},
{
"status": "affected",
"version": "15SU4"
},
{
"status": "affected",
"version": "14SU6"
}
]
},
{
"defaultStatus": "unknown",
"product": "Cisco Unity Connection",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "14"
},
{
"status": "affected",
"version": "14SU1"
},
{
"status": "affected",
"version": "14SU2"
},
{
"status": "affected",
"version": "14SU3"
},
{
"status": "affected",
"version": "14SU3a"
},
{
"status": "affected",
"version": "15"
},
{
"status": "affected",
"version": "15SU1"
},
{
"status": "affected",
"version": "14SU4"
},
{
"status": "affected",
"version": "15SU2"
},
{
"status": "affected",
"version": "15SU3"
},
{
"status": "affected",
"version": "14SU5"
},
{
"status": "affected",
"version": "15SU4"
},
{
"status": "affected",
"version": "14SU6"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "As part of Cisco\u0027s ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM \u0026amp; Presence Service (Unified CM IM\u0026amp;P), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unity Connection have conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.\r\n\r\nThe vulnerabilities tracked by CVE-2026-76474 are related to issues concerning improper authentication that are grouped under the Common Weakness Enumeration (CWE) Class CWE-287."
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-287",
"description": "Improper Authentication",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-21T16:14:48.265Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-voice-hardening-twgbH9e3",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-voice-hardening-twgbH9e3"
}
],
"source": {
"advisory": "cisco-sa-voice-hardening-twgbH9e3",
"defects": [
"CSCwv68640"
],
"discovery": "INTERNAL"
},
"title": "Cisco Unified Communications Products Hardening Release: October 2026 - Improper Authentication Vulnerabilities"
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2026-76474",
"datePublished": "2026-10-21T16:14:48.265Z",
"dateReserved": "2026-08-19T12:02:03.638Z",
"dateUpdated": "2026-11-07T17:29:42.347Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-76445 (GCVE-0-2026-76445)
Vulnerability from cvelistv5 – Published: 2026-10-21 16:14 – Updated: 2026-10-22 19:11
VLAI
EPSS
VEX
Title
Multiple Cisco Products Snort 3 Denial of Service Vulnerability
Summary
Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the detection engine to unexpectedly restart, resulting in a denial of service (DoS) condition.
The vulnerability is due to a flaw in logic handling when General Packet Radio Service (GPRS) Tunneling Protocol (GTP) extension headers are processed within the codec. An attacker could exploit this vulnerability by sending a crafted, fragmented UDP datagram that contains these headers to the Snort 3 Detection Engine of an affected device. A successful exploit could allow the attacker to cause the detection engine to enter an infinite loop, resulting in a DoS condition.
Severity
5.3 (Medium)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-21 17:16 UTC
CWE
- CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')
Assigner
cisco
CNA
References
1 reference
Impacted products
3 products
| Vendor | Product | Version | |
|---|---|---|---|
| Cisco | Cisco Open Source Snort3 |
Affected:
3.12.2.0
Affected: 3.1.2.0 Affected: 3.1.3.0 Affected: 3.1.4.0 Affected: 3.1.5.0 Affected: 3.1.6.0 Affected: 3.1.7.0 Affected: 3.1.8.0 Affected: 3.1.9.0 Affected: 3.1.10.0 Affected: 3.1.12.0 Affected: 3.1.13.0 Affected: 3.1.14.0 Affected: 3.1.15.0 Affected: 3.1.16.0 Affected: 3.1.17.0 Affected: 3.1.18.0 Affected: 3.1.19.0 Affected: 3.1.20.0 Affected: 3.1.21.0 Affected: 3.1.22.0 Affected: 3.1.23.0 Affected: 3.1.24.0 Affected: 3.1.25.0 Affected: 3.1.27.0 Affected: 3.1.28.0 Affected: 3.1.29.0 Affected: 3.1.30.0 Affected: 3.1.31.0 Affected: 3.1.32.0 Affected: 3.1.36.0 Affected: 3.1.38.0 Affected: 3.1.39.0 Affected: 3.1.40.0 Affected: 3.1.41.0 Affected: 3.1.42.0 Affected: 3.1.43.0 Affected: 3.1.45.0 Affected: 3.1.47.0 Affected: 3.1.48.0 Affected: 3.1.50.0 Affected: 3.1.51.0 Affected: 3.1.52.0 Affected: 3.1.53.0 Affected: 3.1.55.0 Affected: 3.1.56.0 Affected: 3.1.57.0 Affected: 3.1.58.0 Affected: 3.1.59.0 Affected: 3.1.60.0 Affected: 3.1.61.0 Affected: 3.1.62.0 Affected: 3.1.63.0 Affected: 3.1.64.0 Affected: 3.1.65.0 Affected: 3.1.66.0 Affected: 3.1.67.0 Affected: 3.1.69.0 Affected: 3.1.70.0 Affected: 3.1.71.0 Affected: 3.1.72.0 Affected: 3.1.73.0 Affected: 3.1.74.0 Affected: 3.1.75.0 Affected: 3.1.76.0 Affected: 3.1.77.0 Affected: 3.1.78.0 Affected: 3.1.81.0 Affected: 3.1.82.0 Affected: 3.1.83.0 Affected: 3.1.84.0 Affected: 3.2.1.0 Affected: 3.2.2.0 Affected: 3.3.0.0 Affected: 3.3.1.0 Affected: 3.3.2.0 Affected: 3.3.3.0 Affected: 3.3.4.0 Affected: 3.3.5.0 Affected: 3.3.7.0 Affected: 3.5.0.0 Affected: 3.5.1.0 Affected: 3.8.1.0 Affected: 3.6.0.0 Affected: 3.6.2.0 Affected: 3.9.3.0 Affected: 3.7.2.0 Affected: 3.7.0.0 Affected: 3.9.6.0 Affected: 3.10.0.0 Affected: 3.10.2.0 Affected: 3.7.4.0 Affected: 3.9.0.0 Affected: 3.5.2.0 Affected: 3.12.1.0 Affected: 3.6.1.0 Affected: 3.9.2.0 Affected: 3.6.3.0 Affected: 3.9.5.0 Affected: 3.7.1.0 Affected: 3.9.7.0 Affected: 3.7.3.0 Affected: 3.10.1.0 Affected: 3.9.1.0 Affected: 3.11.1.0 |
|
| Cisco | Cisco Secure Firewall Threat Defense (FTD) Software |
Affected:
7.0.0
Affected: 7.0.0.1 Affected: 7.0.1 Affected: 7.0.1.1 Affected: 7.0.2 Affected: 7.2.0 Affected: 7.0.2.1 Affected: 7.0.3 Affected: 7.2.0.1 Affected: 7.0.4 Affected: 7.2.1 Affected: 7.0.5 Affected: 7.3.0 Affected: 7.2.2 Affected: 7.2.3 Affected: 7.3.1 Affected: 7.2.4 Affected: 7.0.6 Affected: 7.2.5 Affected: 7.2.4.1 Affected: 7.3.1.1 Affected: 7.4.0 Affected: 7.0.6.1 Affected: 7.2.5.1 Affected: 7.4.1 Affected: 7.2.6 Affected: 7.0.6.2 Affected: 7.4.1.1 Affected: 7.2.7 Affected: 7.2.5.2 Affected: 7.3.1.2 Affected: 7.2.8 Affected: 7.6.0 Affected: 7.4.2 Affected: 7.2.8.1 Affected: 7.0.6.3 Affected: 7.4.2.1 Affected: 7.2.9 Affected: 7.0.7 Affected: 7.7.0 Affected: 7.4.2.2 Affected: 7.2.10 Affected: 7.6.1 Affected: 7.4.2.3 Affected: 7.0.8 Affected: 7.6.2 Affected: 7.7.10 Affected: 7.7.11 Affected: 7.0.8.1 Affected: 7.6.2.1 Affected: 7.7.10.1 Affected: 7.4.2.4 Affected: 7.2.10.2 Affected: 7.4.3 Affected: 7.6.4 Affected: 10.0.0 Affected: 7.4.4 Affected: 7.0.9 Affected: 7.2.11 Affected: 7.4.7 |
|
| Cisco | Cisco UTD SNORT IPS Engine Software |
Affected:
17.12.1a
Affected: 17.12.2 Affected: 17.12.3 Affected: 17.12.4 Affected: 17.12.3a Affected: 17.15.1a Affected: 17.12.4a Affected: 17.15.2c Affected: 17.12.4b Affected: 17.15.2a Affected: 17.12.5 Affected: 17.12.5a Affected: 17.15.3a Affected: 17.15.3 Affected: 17.12.5b Affected: 17.12.5c Affected: 17.15.4 Affected: 17.18.1 Affected: 17.18.1a Affected: 17.12.6 Affected: 17.15.4c Affected: 17.12.5d Affected: 17.18.2 Affected: 17.15.5 Affected: 17.15.5a Affected: 17.12.7 Affected: 17.12.7a Affected: 17.12.7b Affected: 17.18.3a Affected: 17.12.8 Affected: 17.15.6 Affected: 17.18.4 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-76445",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-21T17:16:58.668961Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-22T13:37:54.614Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Cisco Open Source Snort3",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "3.12.2.0"
},
{
"status": "affected",
"version": "3.1.2.0"
},
{
"status": "affected",
"version": "3.1.3.0"
},
{
"status": "affected",
"version": "3.1.4.0"
},
{
"status": "affected",
"version": "3.1.5.0"
},
{
"status": "affected",
"version": "3.1.6.0"
},
{
"status": "affected",
"version": "3.1.7.0"
},
{
"status": "affected",
"version": "3.1.8.0"
},
{
"status": "affected",
"version": "3.1.9.0"
},
{
"status": "affected",
"version": "3.1.10.0"
},
{
"status": "affected",
"version": "3.1.12.0"
},
{
"status": "affected",
"version": "3.1.13.0"
},
{
"status": "affected",
"version": "3.1.14.0"
},
{
"status": "affected",
"version": "3.1.15.0"
},
{
"status": "affected",
"version": "3.1.16.0"
},
{
"status": "affected",
"version": "3.1.17.0"
},
{
"status": "affected",
"version": "3.1.18.0"
},
{
"status": "affected",
"version": "3.1.19.0"
},
{
"status": "affected",
"version": "3.1.20.0"
},
{
"status": "affected",
"version": "3.1.21.0"
},
{
"status": "affected",
"version": "3.1.22.0"
},
{
"status": "affected",
"version": "3.1.23.0"
},
{
"status": "affected",
"version": "3.1.24.0"
},
{
"status": "affected",
"version": "3.1.25.0"
},
{
"status": "affected",
"version": "3.1.27.0"
},
{
"status": "affected",
"version": "3.1.28.0"
},
{
"status": "affected",
"version": "3.1.29.0"
},
{
"status": "affected",
"version": "3.1.30.0"
},
{
"status": "affected",
"version": "3.1.31.0"
},
{
"status": "affected",
"version": "3.1.32.0"
},
{
"status": "affected",
"version": "3.1.36.0"
},
{
"status": "affected",
"version": "3.1.38.0"
},
{
"status": "affected",
"version": "3.1.39.0"
},
{
"status": "affected",
"version": "3.1.40.0"
},
{
"status": "affected",
"version": "3.1.41.0"
},
{
"status": "affected",
"version": "3.1.42.0"
},
{
"status": "affected",
"version": "3.1.43.0"
},
{
"status": "affected",
"version": "3.1.45.0"
},
{
"status": "affected",
"version": "3.1.47.0"
},
{
"status": "affected",
"version": "3.1.48.0"
},
{
"status": "affected",
"version": "3.1.50.0"
},
{
"status": "affected",
"version": "3.1.51.0"
},
{
"status": "affected",
"version": "3.1.52.0"
},
{
"status": "affected",
"version": "3.1.53.0"
},
{
"status": "affected",
"version": "3.1.55.0"
},
{
"status": "affected",
"version": "3.1.56.0"
},
{
"status": "affected",
"version": "3.1.57.0"
},
{
"status": "affected",
"version": "3.1.58.0"
},
{
"status": "affected",
"version": "3.1.59.0"
},
{
"status": "affected",
"version": "3.1.60.0"
},
{
"status": "affected",
"version": "3.1.61.0"
},
{
"status": "affected",
"version": "3.1.62.0"
},
{
"status": "affected",
"version": "3.1.63.0"
},
{
"status": "affected",
"version": "3.1.64.0"
},
{
"status": "affected",
"version": "3.1.65.0"
},
{
"status": "affected",
"version": "3.1.66.0"
},
{
"status": "affected",
"version": "3.1.67.0"
},
{
"status": "affected",
"version": "3.1.69.0"
},
{
"status": "affected",
"version": "3.1.70.0"
},
{
"status": "affected",
"version": "3.1.71.0"
},
{
"status": "affected",
"version": "3.1.72.0"
},
{
"status": "affected",
"version": "3.1.73.0"
},
{
"status": "affected",
"version": "3.1.74.0"
},
{
"status": "affected",
"version": "3.1.75.0"
},
{
"status": "affected",
"version": "3.1.76.0"
},
{
"status": "affected",
"version": "3.1.77.0"
},
{
"status": "affected",
"version": "3.1.78.0"
},
{
"status": "affected",
"version": "3.1.81.0"
},
{
"status": "affected",
"version": "3.1.82.0"
},
{
"status": "affected",
"version": "3.1.83.0"
},
{
"status": "affected",
"version": "3.1.84.0"
},
{
"status": "affected",
"version": "3.2.1.0"
},
{
"status": "affected",
"version": "3.2.2.0"
},
{
"status": "affected",
"version": "3.3.0.0"
},
{
"status": "affected",
"version": "3.3.1.0"
},
{
"status": "affected",
"version": "3.3.2.0"
},
{
"status": "affected",
"version": "3.3.3.0"
},
{
"status": "affected",
"version": "3.3.4.0"
},
{
"status": "affected",
"version": "3.3.5.0"
},
{
"status": "affected",
"version": "3.3.7.0"
},
{
"status": "affected",
"version": "3.5.0.0"
},
{
"status": "affected",
"version": "3.5.1.0"
},
{
"status": "affected",
"version": "3.8.1.0"
},
{
"status": "affected",
"version": "3.6.0.0"
},
{
"status": "affected",
"version": "3.6.2.0"
},
{
"status": "affected",
"version": "3.9.3.0"
},
{
"status": "affected",
"version": "3.7.2.0"
},
{
"status": "affected",
"version": "3.7.0.0"
},
{
"status": "affected",
"version": "3.9.6.0"
},
{
"status": "affected",
"version": "3.10.0.0"
},
{
"status": "affected",
"version": "3.10.2.0"
},
{
"status": "affected",
"version": "3.7.4.0"
},
{
"status": "affected",
"version": "3.9.0.0"
},
{
"status": "affected",
"version": "3.5.2.0"
},
{
"status": "affected",
"version": "3.12.1.0"
},
{
"status": "affected",
"version": "3.6.1.0"
},
{
"status": "affected",
"version": "3.9.2.0"
},
{
"status": "affected",
"version": "3.6.3.0"
},
{
"status": "affected",
"version": "3.9.5.0"
},
{
"status": "affected",
"version": "3.7.1.0"
},
{
"status": "affected",
"version": "3.9.7.0"
},
{
"status": "affected",
"version": "3.7.3.0"
},
{
"status": "affected",
"version": "3.10.1.0"
},
{
"status": "affected",
"version": "3.9.1.0"
},
{
"status": "affected",
"version": "3.11.1.0"
}
]
},
{
"defaultStatus": "unknown",
"product": "Cisco Secure Firewall Threat Defense (FTD) Software",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "7.0.0"
},
{
"status": "affected",
"version": "7.0.0.1"
},
{
"status": "affected",
"version": "7.0.1"
},
{
"status": "affected",
"version": "7.0.1.1"
},
{
"status": "affected",
"version": "7.0.2"
},
{
"status": "affected",
"version": "7.2.0"
},
{
"status": "affected",
"version": "7.0.2.1"
},
{
"status": "affected",
"version": "7.0.3"
},
{
"status": "affected",
"version": "7.2.0.1"
},
{
"status": "affected",
"version": "7.0.4"
},
{
"status": "affected",
"version": "7.2.1"
},
{
"status": "affected",
"version": "7.0.5"
},
{
"status": "affected",
"version": "7.3.0"
},
{
"status": "affected",
"version": "7.2.2"
},
{
"status": "affected",
"version": "7.2.3"
},
{
"status": "affected",
"version": "7.3.1"
},
{
"status": "affected",
"version": "7.2.4"
},
{
"status": "affected",
"version": "7.0.6"
},
{
"status": "affected",
"version": "7.2.5"
},
{
"status": "affected",
"version": "7.2.4.1"
},
{
"status": "affected",
"version": "7.3.1.1"
},
{
"status": "affected",
"version": "7.4.0"
},
{
"status": "affected",
"version": "7.0.6.1"
},
{
"status": "affected",
"version": "7.2.5.1"
},
{
"status": "affected",
"version": "7.4.1"
},
{
"status": "affected",
"version": "7.2.6"
},
{
"status": "affected",
"version": "7.0.6.2"
},
{
"status": "affected",
"version": "7.4.1.1"
},
{
"status": "affected",
"version": "7.2.7"
},
{
"status": "affected",
"version": "7.2.5.2"
},
{
"status": "affected",
"version": "7.3.1.2"
},
{
"status": "affected",
"version": "7.2.8"
},
{
"status": "affected",
"version": "7.6.0"
},
{
"status": "affected",
"version": "7.4.2"
},
{
"status": "affected",
"version": "7.2.8.1"
},
{
"status": "affected",
"version": "7.0.6.3"
},
{
"status": "affected",
"version": "7.4.2.1"
},
{
"status": "affected",
"version": "7.2.9"
},
{
"status": "affected",
"version": "7.0.7"
},
{
"status": "affected",
"version": "7.7.0"
},
{
"status": "affected",
"version": "7.4.2.2"
},
{
"status": "affected",
"version": "7.2.10"
},
{
"status": "affected",
"version": "7.6.1"
},
{
"status": "affected",
"version": "7.4.2.3"
},
{
"status": "affected",
"version": "7.0.8"
},
{
"status": "affected",
"version": "7.6.2"
},
{
"status": "affected",
"version": "7.7.10"
},
{
"status": "affected",
"version": "7.7.11"
},
{
"status": "affected",
"version": "7.0.8.1"
},
{
"status": "affected",
"version": "7.6.2.1"
},
{
"status": "affected",
"version": "7.7.10.1"
},
{
"status": "affected",
"version": "7.4.2.4"
},
{
"status": "affected",
"version": "7.2.10.2"
},
{
"status": "affected",
"version": "7.4.3"
},
{
"status": "affected",
"version": "7.6.4"
},
{
"status": "affected",
"version": "10.0.0"
},
{
"status": "affected",
"version": "7.4.4"
},
{
"status": "affected",
"version": "7.0.9"
},
{
"status": "affected",
"version": "7.2.11"
},
{
"status": "affected",
"version": "7.4.7"
}
]
},
{
"defaultStatus": "unknown",
"product": "Cisco UTD SNORT IPS Engine Software",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "17.12.1a"
},
{
"status": "affected",
"version": "17.12.2"
},
{
"status": "affected",
"version": "17.12.3"
},
{
"status": "affected",
"version": "17.12.4"
},
{
"status": "affected",
"version": "17.12.3a"
},
{
"status": "affected",
"version": "17.15.1a"
},
{
"status": "affected",
"version": "17.12.4a"
},
{
"status": "affected",
"version": "17.15.2c"
},
{
"status": "affected",
"version": "17.12.4b"
},
{
"status": "affected",
"version": "17.15.2a"
},
{
"status": "affected",
"version": "17.12.5"
},
{
"status": "affected",
"version": "17.12.5a"
},
{
"status": "affected",
"version": "17.15.3a"
},
{
"status": "affected",
"version": "17.15.3"
},
{
"status": "affected",
"version": "17.12.5b"
},
{
"status": "affected",
"version": "17.12.5c"
},
{
"status": "affected",
"version": "17.15.4"
},
{
"status": "affected",
"version": "17.18.1"
},
{
"status": "affected",
"version": "17.18.1a"
},
{
"status": "affected",
"version": "17.12.6"
},
{
"status": "affected",
"version": "17.15.4c"
},
{
"status": "affected",
"version": "17.12.5d"
},
{
"status": "affected",
"version": "17.18.2"
},
{
"status": "affected",
"version": "17.15.5"
},
{
"status": "affected",
"version": "17.15.5a"
},
{
"status": "affected",
"version": "17.12.7"
},
{
"status": "affected",
"version": "17.12.7a"
},
{
"status": "affected",
"version": "17.12.7b"
},
{
"status": "affected",
"version": "17.18.3a"
},
{
"status": "affected",
"version": "17.12.8"
},
{
"status": "affected",
"version": "17.15.6"
},
{
"status": "affected",
"version": "17.18.4"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the detection engine to unexpectedly restart, resulting in a denial of service (DoS) condition.\r\n\r\nThe vulnerability is due to a flaw in logic handling when General Packet Radio Service (GPRS) Tunneling Protocol (GTP) extension headers are processed within the codec. An attacker could exploit this vulnerability by sending a crafted, fragmented UDP datagram that contains these headers to the Snort 3 Detection Engine of an affected device. A successful exploit could allow the attacker to cause the detection engine to enter an infinite loop, resulting in a DoS condition."
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-835",
"description": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-22T19:11:11.783Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-snort3-gtpcodec-dos-Rmecfepz",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort3-gtpcodec-dos-Rmecfepz"
}
],
"source": {
"advisory": "cisco-sa-snort3-gtpcodec-dos-Rmecfepz",
"defects": [
"CSCwu17795"
],
"discovery": "INTERNAL"
},
"title": "Multiple Cisco Products Snort 3 Denial of Service Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2026-76445",
"datePublished": "2026-10-21T16:14:39.374Z",
"dateReserved": "2026-08-19T12:02:03.635Z",
"dateUpdated": "2026-10-22T19:11:11.783Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-76473 (GCVE-0-2026-76473)
Vulnerability from cvelistv5 – Published: 2026-10-21 16:14 – Updated: 2026-11-07 17:29
VLAI
EPSS
VEX
CVE Program bundle warning
The CVE Program recognizes that this CVE Record provides vulnerability information that a Supplier CNA believes is very important to consumers. The CVE Program has flagged this CVE Record as it assigns a single CVE ID to a collection of individual vulnerabilities which does not align with CVE's "one vulnerability, one ID" principle, and therefore provides incomplete information. For further clarification, please see the CVE Program's blog, "Preserving Vulnerability-Level Identification" linked below. Details within the CNA container below are viewable by clicking on the CNA name.
https://www.cve.org/Media/News/item/blog/2026/06/…Title
Cisco Unified Communications Products Hardening Release: October 2026 - Improper control of a resource through its lifetime.
Summary
As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unity Connection have conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.
The vulnerabilities tracked by CVE-2026-76473 are related to issues concerning improper neutralization of special elements in output used by a downstream component that are grouped under the Common Weakness Enumeration (CWE) Class CWE-74.
Severity
9.8 (Critical)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-21 00:00 UTC
CWE
- CWE-74 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
Assigner
cisco
CNA
References
1 reference
Impacted products
4 products
| Vendor | Product | Version | |
|---|---|---|---|
| Cisco | Cisco Emergency Responder |
Affected:
14
Affected: 14SU1 Affected: 14SU2 Affected: 14SU3 Affected: 14SU3a Affected: 15 Affected: 15SU1 Affected: 15SU1a Affected: 14SU4 Affected: 15SU2 Affected: 15SU3 Affected: 14SU5 Affected: 15SU4 Affected: 14SU6 |
|
| Cisco | Cisco Unified Communications Manager |
Affected:
14
Affected: 14SU1 Affected: 14SU2 Affected: 14SU3 Affected: 15 Affected: 15SU1 Affected: 14SU4 Affected: 14SU4a Affected: 15SU1a Affected: 15SU2 Affected: 15.0.1.13010-1 Affected: 15.0.1.13011-1 Affected: 15.0.1.13012-1 Affected: 15.0.1.13013-1 Affected: 15.0.1.13014-1 Affected: 15.0.1.13015-1 Affected: 15.0.1.13016-1 Affected: 15.0.1.13017-1 Affected: 15SU3a Affected: 14SU5 Affected: 15SU4 Affected: 15SU4a Affected: 14SU6 |
|
| Cisco | Cisco Unified Communications Manager IM and Presence Service |
Affected:
14
Affected: 14SU1 Affected: 14SU2 Affected: 14SU2a Affected: 14SU3 Affected: 15 Affected: 15SU1 Affected: 14SU4 Affected: 15SU2 Affected: 15SU3 Affected: 14SU5 Affected: 15SU4 Affected: 14SU6 |
|
| Cisco | Cisco Unity Connection |
Affected:
14
Affected: 14SU1 Affected: 14SU2 Affected: 14SU3 Affected: 14SU3a Affected: 15 Affected: 15SU1 Affected: 14SU4 Affected: 15SU2 Affected: 15SU3 Affected: 14SU5 Affected: 15SU4 Affected: 14SU6 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-76473",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-21T00:00:00+00:00",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-22T23:04:31.612Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"descriptions": [
{
"lang": "en",
"value": "The CVE Program recognizes that this CVE Record provides vulnerability information that a Supplier CNA believes is very important to consumers. The CVE Program has flagged this CVE Record as it assigns a single CVE ID to a collection of individual vulnerabilities which does not align with CVE\u0027s \"one vulnerability, one ID\" principle, and therefore provides incomplete information. For further clarification, please see the CVE Program\u0027s blog, \"Preserving Vulnerability-Level Identification\" linked below. Details within the CNA container below are viewable by clicking on the CNA name."
}
],
"providerMetadata": {
"dateUpdated": "2026-11-07T17:29:42.232Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"url": "https://www.cve.org/Media/News/item/blog/2026/06/16/Preserving-Vulnerability-Level-Identification"
}
],
"tags": [
"x_bundling-flagged-by-CVE-Program"
]
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Cisco Emergency Responder",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "14"
},
{
"status": "affected",
"version": "14SU1"
},
{
"status": "affected",
"version": "14SU2"
},
{
"status": "affected",
"version": "14SU3"
},
{
"status": "affected",
"version": "14SU3a"
},
{
"status": "affected",
"version": "15"
},
{
"status": "affected",
"version": "15SU1"
},
{
"status": "affected",
"version": "15SU1a"
},
{
"status": "affected",
"version": "14SU4"
},
{
"status": "affected",
"version": "15SU2"
},
{
"status": "affected",
"version": "15SU3"
},
{
"status": "affected",
"version": "14SU5"
},
{
"status": "affected",
"version": "15SU4"
},
{
"status": "affected",
"version": "14SU6"
}
]
},
{
"defaultStatus": "unknown",
"product": "Cisco Unified Communications Manager",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "14"
},
{
"status": "affected",
"version": "14SU1"
},
{
"status": "affected",
"version": "14SU2"
},
{
"status": "affected",
"version": "14SU3"
},
{
"status": "affected",
"version": "15"
},
{
"status": "affected",
"version": "15SU1"
},
{
"status": "affected",
"version": "14SU4"
},
{
"status": "affected",
"version": "14SU4a"
},
{
"status": "affected",
"version": "15SU1a"
},
{
"status": "affected",
"version": "15SU2"
},
{
"status": "affected",
"version": "15.0.1.13010-1"
},
{
"status": "affected",
"version": "15.0.1.13011-1"
},
{
"status": "affected",
"version": "15.0.1.13012-1"
},
{
"status": "affected",
"version": "15.0.1.13013-1"
},
{
"status": "affected",
"version": "15.0.1.13014-1"
},
{
"status": "affected",
"version": "15.0.1.13015-1"
},
{
"status": "affected",
"version": "15.0.1.13016-1"
},
{
"status": "affected",
"version": "15.0.1.13017-1"
},
{
"status": "affected",
"version": "15SU3a"
},
{
"status": "affected",
"version": "14SU5"
},
{
"status": "affected",
"version": "15SU4"
},
{
"status": "affected",
"version": "15SU4a"
},
{
"status": "affected",
"version": "14SU6"
}
]
},
{
"defaultStatus": "unknown",
"product": "Cisco Unified Communications Manager IM and Presence Service",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "14"
},
{
"status": "affected",
"version": "14SU1"
},
{
"status": "affected",
"version": "14SU2"
},
{
"status": "affected",
"version": "14SU2a"
},
{
"status": "affected",
"version": "14SU3"
},
{
"status": "affected",
"version": "15"
},
{
"status": "affected",
"version": "15SU1"
},
{
"status": "affected",
"version": "14SU4"
},
{
"status": "affected",
"version": "15SU2"
},
{
"status": "affected",
"version": "15SU3"
},
{
"status": "affected",
"version": "14SU5"
},
{
"status": "affected",
"version": "15SU4"
},
{
"status": "affected",
"version": "14SU6"
}
]
},
{
"defaultStatus": "unknown",
"product": "Cisco Unity Connection",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "14"
},
{
"status": "affected",
"version": "14SU1"
},
{
"status": "affected",
"version": "14SU2"
},
{
"status": "affected",
"version": "14SU3"
},
{
"status": "affected",
"version": "14SU3a"
},
{
"status": "affected",
"version": "15"
},
{
"status": "affected",
"version": "15SU1"
},
{
"status": "affected",
"version": "14SU4"
},
{
"status": "affected",
"version": "15SU2"
},
{
"status": "affected",
"version": "15SU3"
},
{
"status": "affected",
"version": "14SU5"
},
{
"status": "affected",
"version": "15SU4"
},
{
"status": "affected",
"version": "14SU6"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "As part of Cisco\u0027s ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM \u0026amp; Presence Service (Unified CM IM\u0026amp;P), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unity Connection have conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.\r\n\r\nThe vulnerabilities tracked by CVE-2026-76473 are related to issues concerning improper neutralization of special elements in output used by a downstream component that are grouped under the Common Weakness Enumeration (CWE) Class CWE-74."
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-74",
"description": "Improper Neutralization of Special Elements in Output Used by a Downstream Component (\u0027Injection\u0027)",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T17:30:04.477Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-voice-hardening-twgbH9e3",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-voice-hardening-twgbH9e3"
}
],
"source": {
"advisory": "cisco-sa-voice-hardening-twgbH9e3",
"defects": [
"CSCwv45325"
],
"discovery": "INTERNAL"
},
"title": "Cisco Unified Communications Products Hardening Release: October 2026 - Improper control of a resource through its lifetime."
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2026-76473",
"datePublished": "2026-10-21T16:14:31.067Z",
"dateReserved": "2026-08-19T12:02:03.638Z",
"dateUpdated": "2026-11-07T17:29:42.232Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-76435 (GCVE-0-2026-76435)
Vulnerability from cvelistv5 – Published: 2026-10-21 16:14 – Updated: 2026-10-22 13:37
VLAI
EPSS
VEX
Title
Cisco Expressway Series Information Disclosure Vulnerability
Summary
A vulnerability in Cisco Expressway Series could allow an unauthenticated, remote attacker to obtain sensitive information from an affected device.
This vulnerability is due to insufficient authorization checks of HTTP requests during Mobile and Remote Access (MRA) provisioning. An attacker could exploit this vulnerability by submitting a crafted URL request to an affected device. A successful exploit could allow the attacker to access sensitive information that they would otherwise not have authorization to access.
Note: Cisco Expressway Series refers to Cisco Expressway Core (Expressway-C) devices and Cisco Expressway Edge (Expressway-E) devices.
Severity
5.3 (Medium)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-22 13:22 UTC
CWE
- CWE-497 - Exposure of Sensitive System Information to an Unauthorized Control Sphere
Assigner
cisco
CNA
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Cisco | Cisco TelePresence Video Communication Server (VCS) Expressway |
Affected:
X8.11.2
Affected: X8.6 Affected: X8.11.3 Affected: X8.2.2 Affected: X8.8.3 Affected: X8.11.0 Affected: X12.5.2 Affected: X8.1.1 Affected: X8.9 Affected: X12.5.1 Affected: X12.5.6 Affected: X8.7.3 Affected: X12.6.0 Affected: X8.11.1 Affected: X8.5 Affected: X8.9.1 Affected: X8.10.2 Affected: X8.8.2 Affected: X8.5.3 Affected: X8.1 Affected: X8.9.2 Affected: X8.11.4 Affected: X12.5.4 Affected: X8.8.1 Affected: X8.2.1 Affected: X8.5.1 Affected: X8.6.1 Affected: X8.1.2 Affected: X8.8 Affected: X8.10.0 Affected: X12.5.3 Affected: X8.10.1 Affected: X12.5.7 Affected: X8.10.3 Affected: X8.7.1 Affected: X8.2 Affected: X12.5.8 Affected: X8.7 Affected: X8.5.2 Affected: X12.5.9 Affected: X12.5.0 Affected: X8.10.4 Affected: X8.7.2 Affected: X12.5.5 Affected: X12.6.1 Affected: X12.6.2 Affected: X12.6.3 Affected: X12.6.4 Affected: X12.7.0 Affected: X12.7.1 Affected: X14.0.0 Affected: X14.0.1 Affected: X14.0.2 Affected: X14.0.3 Affected: X14.0.4 Affected: X14.0.5 Affected: X14.0.6 Affected: X14.0.7 Affected: X14.0.8 Affected: X14.2.0 Affected: X14.0.9 Affected: X14.2.1 Affected: X14.2.2 Affected: X14.0.11 Affected: X14.2.5 Affected: X14.0.10 Affected: X14.2.6 Affected: X14.2.7 Affected: X14.3.0 Affected: X14.3.1 Affected: X14.3.2 Affected: X14.3.3 Affected: X15.0.0 Affected: X14.3.4 Affected: X14.3.5 Affected: X15.0.1 Affected: X15.0.2 Affected: X15.0.3 Affected: X14.3.6 Affected: X15.2.0 Affected: X15.2.1 Affected: X15.2.2 Affected: X15.2.3 Affected: X14.3.7 Affected: X15.2.4. Affected: X15.2.4 Affected: X15.3.0 Affected: X15.3.1 Affected: X15.3.2 Affected: X15.4.0 Affected: X15.5.0 Affected: X15.5.1 Affected: X15.5.2 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-76435",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-22T13:22:06.316293Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-22T13:37:54.901Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Cisco TelePresence Video Communication Server (VCS) Expressway",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "X8.11.2"
},
{
"status": "affected",
"version": "X8.6"
},
{
"status": "affected",
"version": "X8.11.3"
},
{
"status": "affected",
"version": "X8.2.2"
},
{
"status": "affected",
"version": "X8.8.3"
},
{
"status": "affected",
"version": "X8.11.0"
},
{
"status": "affected",
"version": "X12.5.2"
},
{
"status": "affected",
"version": "X8.1.1"
},
{
"status": "affected",
"version": "X8.9"
},
{
"status": "affected",
"version": "X12.5.1"
},
{
"status": "affected",
"version": "X12.5.6"
},
{
"status": "affected",
"version": "X8.7.3"
},
{
"status": "affected",
"version": "X12.6.0"
},
{
"status": "affected",
"version": "X8.11.1"
},
{
"status": "affected",
"version": "X8.5"
},
{
"status": "affected",
"version": "X8.9.1"
},
{
"status": "affected",
"version": "X8.10.2"
},
{
"status": "affected",
"version": "X8.8.2"
},
{
"status": "affected",
"version": "X8.5.3"
},
{
"status": "affected",
"version": "X8.1"
},
{
"status": "affected",
"version": "X8.9.2"
},
{
"status": "affected",
"version": "X8.11.4"
},
{
"status": "affected",
"version": "X12.5.4"
},
{
"status": "affected",
"version": "X8.8.1"
},
{
"status": "affected",
"version": "X8.2.1"
},
{
"status": "affected",
"version": "X8.5.1"
},
{
"status": "affected",
"version": "X8.6.1"
},
{
"status": "affected",
"version": "X8.1.2"
},
{
"status": "affected",
"version": "X8.8"
},
{
"status": "affected",
"version": "X8.10.0"
},
{
"status": "affected",
"version": "X12.5.3"
},
{
"status": "affected",
"version": "X8.10.1"
},
{
"status": "affected",
"version": "X12.5.7"
},
{
"status": "affected",
"version": "X8.10.3"
},
{
"status": "affected",
"version": "X8.7.1"
},
{
"status": "affected",
"version": "X8.2"
},
{
"status": "affected",
"version": "X12.5.8"
},
{
"status": "affected",
"version": "X8.7"
},
{
"status": "affected",
"version": "X8.5.2"
},
{
"status": "affected",
"version": "X12.5.9"
},
{
"status": "affected",
"version": "X12.5.0"
},
{
"status": "affected",
"version": "X8.10.4"
},
{
"status": "affected",
"version": "X8.7.2"
},
{
"status": "affected",
"version": "X12.5.5"
},
{
"status": "affected",
"version": "X12.6.1"
},
{
"status": "affected",
"version": "X12.6.2"
},
{
"status": "affected",
"version": "X12.6.3"
},
{
"status": "affected",
"version": "X12.6.4"
},
{
"status": "affected",
"version": "X12.7.0"
},
{
"status": "affected",
"version": "X12.7.1"
},
{
"status": "affected",
"version": "X14.0.0"
},
{
"status": "affected",
"version": "X14.0.1"
},
{
"status": "affected",
"version": "X14.0.2"
},
{
"status": "affected",
"version": "X14.0.3"
},
{
"status": "affected",
"version": "X14.0.4"
},
{
"status": "affected",
"version": "X14.0.5"
},
{
"status": "affected",
"version": "X14.0.6"
},
{
"status": "affected",
"version": "X14.0.7"
},
{
"status": "affected",
"version": "X14.0.8"
},
{
"status": "affected",
"version": "X14.2.0"
},
{
"status": "affected",
"version": "X14.0.9"
},
{
"status": "affected",
"version": "X14.2.1"
},
{
"status": "affected",
"version": "X14.2.2"
},
{
"status": "affected",
"version": "X14.0.11"
},
{
"status": "affected",
"version": "X14.2.5"
},
{
"status": "affected",
"version": "X14.0.10"
},
{
"status": "affected",
"version": "X14.2.6"
},
{
"status": "affected",
"version": "X14.2.7"
},
{
"status": "affected",
"version": "X14.3.0"
},
{
"status": "affected",
"version": "X14.3.1"
},
{
"status": "affected",
"version": "X14.3.2"
},
{
"status": "affected",
"version": "X14.3.3"
},
{
"status": "affected",
"version": "X15.0.0"
},
{
"status": "affected",
"version": "X14.3.4"
},
{
"status": "affected",
"version": "X14.3.5"
},
{
"status": "affected",
"version": "X15.0.1"
},
{
"status": "affected",
"version": "X15.0.2"
},
{
"status": "affected",
"version": "X15.0.3"
},
{
"status": "affected",
"version": "X14.3.6"
},
{
"status": "affected",
"version": "X15.2.0"
},
{
"status": "affected",
"version": "X15.2.1"
},
{
"status": "affected",
"version": "X15.2.2"
},
{
"status": "affected",
"version": "X15.2.3"
},
{
"status": "affected",
"version": "X14.3.7"
},
{
"status": "affected",
"version": "X15.2.4."
},
{
"status": "affected",
"version": "X15.2.4"
},
{
"status": "affected",
"version": "X15.3.0"
},
{
"status": "affected",
"version": "X15.3.1"
},
{
"status": "affected",
"version": "X15.3.2"
},
{
"status": "affected",
"version": "X15.4.0"
},
{
"status": "affected",
"version": "X15.5.0"
},
{
"status": "affected",
"version": "X15.5.1"
},
{
"status": "affected",
"version": "X15.5.2"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in Cisco Expressway Series could allow an unauthenticated, remote attacker to obtain sensitive information from an affected device.\r\n\r\nThis vulnerability is due to insufficient authorization checks of HTTP requests during Mobile and Remote Access (MRA) provisioning. An attacker could exploit this vulnerability by submitting a crafted URL request to an affected device. A successful exploit could allow the attacker to access sensitive information that they would otherwise not have authorization to access.\r\nNote: Cisco Expressway Series refers to Cisco Expressway Core (Expressway-C) devices and Cisco Expressway Edge (Expressway-E) devices."
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-497",
"description": "Exposure of Sensitive System Information to an Unauthorized Control Sphere",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-21T16:14:19.230Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-expressway-inf-disc-vvYqgSTS",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-inf-disc-vvYqgSTS"
}
],
"source": {
"advisory": "cisco-sa-expressway-inf-disc-vvYqgSTS",
"defects": [
"CSCww11368"
],
"discovery": "EXTERNAL"
},
"title": "Cisco Expressway Series Information Disclosure Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2026-76435",
"datePublished": "2026-10-21T16:14:19.230Z",
"dateReserved": "2026-08-19T12:02:03.634Z",
"dateUpdated": "2026-10-22T13:37:54.901Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-76466 (GCVE-0-2026-76466)
Vulnerability from cvelistv5 – Published: 2026-10-21 16:14 – Updated: 2026-10-22 23:04
VLAI
EPSS
VEX
Title
Cisco Expressway Series Remote Code Execution Vulnerability
Summary
A vulnerability in the database service feature of Cisco Expressway Series could allow an unauthenticated, remote attacker with network access to a Cisco Expressway device to execute arbitrary operating system commands as root.
This vulnerability is due to the use of persistent cookies. Additionally, there is insufficient validation of client certificates when the TLS Verify Mode is set to Enabled for clustering, which means that client certificates are not validated. An attacker with possession of the cookies could exploit this vulnerability by connecting to the database service and invoking specific remote procedure call (RPC) commands. A successful exploit could allow the attacker to execute arbitrary commands as root on the underlying operating system of an affected device.
Note: Cisco Expressway Series refers to Cisco Expressway Core (Expressway-C) devices and Cisco Expressway Edge (Expressway-E) devices.
Severity
9.8 (Critical)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-21 00:00 UTC
CWE
- CWE-798 - Use of Hard-coded Credentials
Assigner
cisco
CNA
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Cisco | Cisco TelePresence Video Communication Server (VCS) Expressway |
Affected:
X8.11.2
Affected: X8.6 Affected: X8.11.3 Affected: X8.2.2 Affected: X8.8.3 Affected: X8.11.0 Affected: X12.5.2 Affected: X8.1.1 Affected: X8.9 Affected: X12.5.1 Affected: X12.5.6 Affected: X8.7.3 Affected: X12.6.0 Affected: X8.11.1 Affected: X8.5 Affected: X8.9.1 Affected: X8.10.2 Affected: X8.8.2 Affected: X8.5.3 Affected: X8.1 Affected: X8.9.2 Affected: X8.11.4 Affected: X12.5.4 Affected: X8.8.1 Affected: X8.2.1 Affected: X8.5.1 Affected: X8.6.1 Affected: X8.1.2 Affected: X8.8 Affected: X8.10.0 Affected: X12.5.3 Affected: X8.10.1 Affected: X12.5.7 Affected: X8.10.3 Affected: X8.7.1 Affected: X8.2 Affected: X12.5.8 Affected: X8.7 Affected: X8.5.2 Affected: X12.5.9 Affected: X12.5.0 Affected: X8.10.4 Affected: X8.7.2 Affected: X12.5.5 Affected: X12.6.1 Affected: X12.6.2 Affected: X12.6.3 Affected: X12.6.4 Affected: X12.7.0 Affected: X12.7.1 Affected: X14.0.0 Affected: X14.0.1 Affected: X14.0.2 Affected: X14.0.3 Affected: X14.0.4 Affected: X14.0.5 Affected: X14.0.6 Affected: X14.0.7 Affected: X14.0.8 Affected: X14.2.0 Affected: X14.0.9 Affected: X14.2.1 Affected: X14.2.2 Affected: X14.0.11 Affected: X14.2.5 Affected: X14.0.10 Affected: X14.2.6 Affected: X14.2.7 Affected: X14.3.0 Affected: X14.3.1 Affected: X14.3.2 Affected: X14.3.3 Affected: X15.0.0 Affected: X14.3.4 Affected: X14.3.5 Affected: X15.0.1 Affected: X15.0.2 Affected: X15.0.3 Affected: X14.3.6 Affected: X15.2.0 Affected: X15.2.1 Affected: X15.2.2 Affected: X15.2.3 Affected: X14.3.7 Affected: X15.2.4. Affected: X15.2.4 Affected: X15.3.0 Affected: X15.3.1 Affected: X15.3.2 Affected: X15.4.0 Affected: X15.5.0 Affected: X15.5.1 Affected: X15.5.2 Affected: X15.5.3 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-76466",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-21T00:00:00+00:00",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-22T23:04:48.699Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Cisco TelePresence Video Communication Server (VCS) Expressway",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "X8.11.2"
},
{
"status": "affected",
"version": "X8.6"
},
{
"status": "affected",
"version": "X8.11.3"
},
{
"status": "affected",
"version": "X8.2.2"
},
{
"status": "affected",
"version": "X8.8.3"
},
{
"status": "affected",
"version": "X8.11.0"
},
{
"status": "affected",
"version": "X12.5.2"
},
{
"status": "affected",
"version": "X8.1.1"
},
{
"status": "affected",
"version": "X8.9"
},
{
"status": "affected",
"version": "X12.5.1"
},
{
"status": "affected",
"version": "X12.5.6"
},
{
"status": "affected",
"version": "X8.7.3"
},
{
"status": "affected",
"version": "X12.6.0"
},
{
"status": "affected",
"version": "X8.11.1"
},
{
"status": "affected",
"version": "X8.5"
},
{
"status": "affected",
"version": "X8.9.1"
},
{
"status": "affected",
"version": "X8.10.2"
},
{
"status": "affected",
"version": "X8.8.2"
},
{
"status": "affected",
"version": "X8.5.3"
},
{
"status": "affected",
"version": "X8.1"
},
{
"status": "affected",
"version": "X8.9.2"
},
{
"status": "affected",
"version": "X8.11.4"
},
{
"status": "affected",
"version": "X12.5.4"
},
{
"status": "affected",
"version": "X8.8.1"
},
{
"status": "affected",
"version": "X8.2.1"
},
{
"status": "affected",
"version": "X8.5.1"
},
{
"status": "affected",
"version": "X8.6.1"
},
{
"status": "affected",
"version": "X8.1.2"
},
{
"status": "affected",
"version": "X8.8"
},
{
"status": "affected",
"version": "X8.10.0"
},
{
"status": "affected",
"version": "X12.5.3"
},
{
"status": "affected",
"version": "X8.10.1"
},
{
"status": "affected",
"version": "X12.5.7"
},
{
"status": "affected",
"version": "X8.10.3"
},
{
"status": "affected",
"version": "X8.7.1"
},
{
"status": "affected",
"version": "X8.2"
},
{
"status": "affected",
"version": "X12.5.8"
},
{
"status": "affected",
"version": "X8.7"
},
{
"status": "affected",
"version": "X8.5.2"
},
{
"status": "affected",
"version": "X12.5.9"
},
{
"status": "affected",
"version": "X12.5.0"
},
{
"status": "affected",
"version": "X8.10.4"
},
{
"status": "affected",
"version": "X8.7.2"
},
{
"status": "affected",
"version": "X12.5.5"
},
{
"status": "affected",
"version": "X12.6.1"
},
{
"status": "affected",
"version": "X12.6.2"
},
{
"status": "affected",
"version": "X12.6.3"
},
{
"status": "affected",
"version": "X12.6.4"
},
{
"status": "affected",
"version": "X12.7.0"
},
{
"status": "affected",
"version": "X12.7.1"
},
{
"status": "affected",
"version": "X14.0.0"
},
{
"status": "affected",
"version": "X14.0.1"
},
{
"status": "affected",
"version": "X14.0.2"
},
{
"status": "affected",
"version": "X14.0.3"
},
{
"status": "affected",
"version": "X14.0.4"
},
{
"status": "affected",
"version": "X14.0.5"
},
{
"status": "affected",
"version": "X14.0.6"
},
{
"status": "affected",
"version": "X14.0.7"
},
{
"status": "affected",
"version": "X14.0.8"
},
{
"status": "affected",
"version": "X14.2.0"
},
{
"status": "affected",
"version": "X14.0.9"
},
{
"status": "affected",
"version": "X14.2.1"
},
{
"status": "affected",
"version": "X14.2.2"
},
{
"status": "affected",
"version": "X14.0.11"
},
{
"status": "affected",
"version": "X14.2.5"
},
{
"status": "affected",
"version": "X14.0.10"
},
{
"status": "affected",
"version": "X14.2.6"
},
{
"status": "affected",
"version": "X14.2.7"
},
{
"status": "affected",
"version": "X14.3.0"
},
{
"status": "affected",
"version": "X14.3.1"
},
{
"status": "affected",
"version": "X14.3.2"
},
{
"status": "affected",
"version": "X14.3.3"
},
{
"status": "affected",
"version": "X15.0.0"
},
{
"status": "affected",
"version": "X14.3.4"
},
{
"status": "affected",
"version": "X14.3.5"
},
{
"status": "affected",
"version": "X15.0.1"
},
{
"status": "affected",
"version": "X15.0.2"
},
{
"status": "affected",
"version": "X15.0.3"
},
{
"status": "affected",
"version": "X14.3.6"
},
{
"status": "affected",
"version": "X15.2.0"
},
{
"status": "affected",
"version": "X15.2.1"
},
{
"status": "affected",
"version": "X15.2.2"
},
{
"status": "affected",
"version": "X15.2.3"
},
{
"status": "affected",
"version": "X14.3.7"
},
{
"status": "affected",
"version": "X15.2.4."
},
{
"status": "affected",
"version": "X15.2.4"
},
{
"status": "affected",
"version": "X15.3.0"
},
{
"status": "affected",
"version": "X15.3.1"
},
{
"status": "affected",
"version": "X15.3.2"
},
{
"status": "affected",
"version": "X15.4.0"
},
{
"status": "affected",
"version": "X15.5.0"
},
{
"status": "affected",
"version": "X15.5.1"
},
{
"status": "affected",
"version": "X15.5.2"
},
{
"status": "affected",
"version": "X15.5.3"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the database service feature of Cisco Expressway Series could allow an unauthenticated, remote attacker with network access to a Cisco Expressway device to execute arbitrary operating system commands as\u0026nbsp;root.\r\n\r\nThis vulnerability is due to the use of persistent cookies. Additionally, there is insufficient validation of client certificates when the TLS Verify Mode is set to Enabled for clustering, which means that client certificates are not validated. An attacker with possession of the cookies could exploit this vulnerability by connecting to the database service and invoking specific remote procedure call (RPC) commands. A successful exploit could allow the attacker to execute arbitrary commands as root on the underlying operating system of an affected device.\r\nNote: Cisco Expressway Series refers to Cisco Expressway Core (Expressway-C) devices and Cisco Expressway Edge (Expressway-E) devices."
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-798",
"description": "Use of Hard-coded Credentials",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-21T16:14:19.225Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-vcs-static-cred-hr7EWZ8t",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vcs-static-cred-hr7EWZ8t"
}
],
"source": {
"advisory": "cisco-sa-vcs-static-cred-hr7EWZ8t",
"defects": [
"CSCww27732"
],
"discovery": "EXTERNAL"
},
"title": "Cisco Expressway Series Remote Code Execution Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2026-76466",
"datePublished": "2026-10-21T16:14:19.225Z",
"dateReserved": "2026-08-19T12:02:03.638Z",
"dateUpdated": "2026-10-22T23:04:48.699Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}