Cisco Expressway Series Software Vulnerabilities Disclosure
CVE-2026-76491

7.5HIGH

Key Information:

Vendor

Cisco
Status
Cisco Telepresence Video Communication Server (vcs) Expressway
Vendor
CVE Published:
21 October 2026

Badges

👾 Exploit Exists

What is CVE-2026-76491?

Cisco has identified significant security vulnerabilities within its Expressway Series software during a thorough internal review. The vulnerabilities are primarily associated with reachable assertions, which may potentially be exploited if not addressed. These vulnerabilities align with the Common Weakness Enumeration (CWE) classification, specifically CWE-617. Users are encouraged to review the updates and hardening releases provided by Cisco to strengthen their security posture.

Affected Version(s)

Cisco TelePresence Video Communication Server (VCS) Expressway X8.11.2

Cisco TelePresence Video Communication Server (VCS) Expressway X8.6

Cisco TelePresence Video Communication Server (VCS) Expressway X8.11.3

References

https://sec.cloudapps.cisco.com/security/center/content/C...

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.