Null Pointer Vulnerabilities in Cisco Expressway Series Software
CVE-2026-76492

7.5HIGH

Key Information:

Vendor

Cisco
Status
Cisco Telepresence Video Communication Server (vcs) Expressway
Vendor
CVE Published:
21 October 2026

Badges

👾 Exploit Exists

What is CVE-2026-76492?

The Cisco Expressway Series software is impacted by vulnerabilities tied to null pointer dereferencing, a security flaw categorized under the Common Weakness Enumeration (CWE) as CWE-476. This vulnerability may allow an attacker to disrupt the normal operation of affected systems, which could lead to potential data exposure or system instability. Cisco has taken significant steps through software hardening releases to mitigate these vulnerabilities and enhance the security posture of its products.

Affected Version(s)

Cisco TelePresence Video Communication Server (VCS) Expressway X8.11.2

Cisco TelePresence Video Communication Server (VCS) Expressway X8.6

Cisco TelePresence Video Communication Server (VCS) Expressway X8.11.3

References

https://sec.cloudapps.cisco.com/security/center/content/C...

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.