CVE-2026-76491

Cisco Expressway Series Software Hardening Release: October 2026 - Denial of Service Vulnerabilities

Severity
High 7.5
CVSS 3.1
Remote · no auth what this means
Exploited
Not listed
EPSS
—
Discovered by
Vendor
Vendor-published field
Published
Oct 21, 2026
Assigned by cisco

Description

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.   The vulnerabilities tracked by CVE-2026-76491 are related to issues concerning reachable assertions that are grouped under the Common Weakness Enumeration (CWE) Base CWE-617.

Weakness: CWE-617

Affected products

Vendor Product Category Matched by
Cisco Cisco TelePresence Other Products cna-assigner
Vendor-reported products (1)
  • Cisco · Cisco TelePresence Video Communication Server (VCS) Expressway

Vendor advisory

cisco-sa-exwy-hardening-FhcqBVcs

Cisco Expressway Series Security Hardening Release: October 2026

Cisco’s rating: High (advisory CVSS 8.6) · Published Oct 21, 2026

The vendor’s rating applies to the whole advisory and can differ from this CVE’s own CVSS severity. Where this comes from

Something wrong here?