Skip to content
OpenAdvisories
High WID-SEC-2026-4105 10 CVEs

Cisco Expressway: Mehrere Schwachstellen

Published Oct 21, 2026 · Updated Nov 11, 2026 · Revision 2 · de

Vendor: Cisco Product: Expressway

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Cisco Expressway ausnutzen, um beliebigen Code auszuführen – sogar mit Root-Rechten –, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu verursachen.

Product

Cisco Expressway ermöglicht die Nutzung verschiedener Intranetdienste aus dem Internet, ohne ein VPN zu benötigen.

Vulnerabilities 10

  • Critical 9.8
    CVE-2026-76466 Public exploit

    Cisco Expressway Series Remote Code Execution Vulnerability

    A vulnerability in the database service feature of Cisco Expressway Series could allow an unauthenticated, remote attacker with network access to a Cisco Expressway device to execute arbitrary operating system commands as root. This vulnerability is due …

    Cisco Cisco TelePresence Video Communication Server (VCS) Expressway Network devices
  • High 8.6
    CVE-2026-76490

    Cisco Expressway Series Software Hardening Release: October 2026 - Out-of-bounds Write Vulnerabilities

    As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address mul…

    Cisco Cisco TelePresence Video Communication Server (VCS) Expressway Network devices
  • High 7.8
    CVE-2026-76494

    Cisco Expressway Series Software Hardening Release: October 2026 - Code Injection Vulnerabilities

    As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address mul…

    Cisco Cisco TelePresence Video Communication Server (VCS) Expressway Network devices
  • High 7.8
    CVE-2026-76495

    Cisco Expressway Series Software Hardening Release: October 2026 - Incorrect Permission Assignment Vulnerabilities

    As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address mul…

    Cisco Cisco TelePresence Video Communication Server (VCS) Expressway Network devices
  • High 7.5
    CVE-2026-76491

    Cisco Expressway Series Software Hardening Release: October 2026 - Denial of Service Vulnerabilities

    As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address mul…

    Cisco Cisco TelePresence Video Communication Server (VCS) Expressway Network devices
  • High 7.5
    CVE-2026-76492

    Cisco Expressway Series Software Hardening Release: October 2026 - NULL Pointer Vulnerabilities

    As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address mul…

    Cisco Cisco TelePresence Video Communication Server (VCS) Expressway Network devices
  • High 7.5
    CVE-2026-76493

    Cisco Expressway Series Software Hardening Release: October 2026 - Uncaught Exception Vulnerabilities

    As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address mul…

    Cisco Cisco TelePresence Video Communication Server (VCS) Expressway Network devices
  • High 7.0
    CVE-2026-76496

    Cisco Expressway Series Software Hardening Release: October 2026 - Improper Link Resolution Vulnerabilities

    As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address mul…

    Cisco Cisco TelePresence Video Communication Server (VCS) Expressway Network devices
  • Medium 6.6
    CVE-2026-76497

    Cisco Expressway Series Software Hardening Release: October 2026 - Insecure Temporary File Vulnerabilities

    As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address mul…

    Cisco Cisco TelePresence Video Communication Server (VCS) Expressway Network devices
  • Medium 5.3
    CVE-2026-76435

    Cisco Expressway Series Information Disclosure Vulnerability

    A vulnerability in Cisco Expressway Series could allow an unauthenticated, remote attacker to obtain sensitive information from an affected device. This vulnerability is due to insufficient authorization checks of HTTP requests during Mobile and Remote Access…

    Cisco Cisco TelePresence Video Communication Server (VCS) Expressway Network devices

Revision history

  1. #2

    PoC aufgenommen CVE-2026-76466

  2. #1

    Initiale Fassung

References