Out-of-Bounds Write Vulnerabilities in Cisco Expressway Series
CVE-2026-76490

8.6HIGH

Key Information:

Vendor

Cisco
Status
Cisco Telepresence Video Communication Server (vcs) Expressway
Vendor
CVE Published:
21 October 2026

Badges

👾 Exploit Exists

What is CVE-2026-76490?

Cisco's Expressway Series software contains vulnerabilities related to out-of-bounds writes, which can lead to unexpected behavior and security risks. These vulnerabilities, identified during a thorough internal security audit, have been addressed through robust software hardening measures. Organizations using Cisco Expressway Series products are advised to update their systems to mitigate potential exploits.

Affected Version(s)

Cisco TelePresence Video Communication Server (VCS) Expressway X8.11.2

Cisco TelePresence Video Communication Server (VCS) Expressway X8.6

Cisco TelePresence Video Communication Server (VCS) Expressway X8.11.3

References

https://sec.cloudapps.cisco.com/security/center/content/C...

CVSS V3.1

Score:
8.6
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.