{"id":"CVE-2026-76490","title":"Cisco Expressway Series Software Hardening Release: October 2026 - Out-of-bounds Write Vulnerabilities","summary":"As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening rel…","severity":"high","cvss":8.6,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H","cvssSource":"cna","cwe":["CWE-787"],"vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","affected":["telepresence_video_communication_server_vcs_expressway X8.11.2","telepresence_video_communication_server_vcs_expressway X8.6","telepresence_video_communication_server_vcs_expressway X8.11.3","telepresence_video_communication_server_vcs_expressway X8.2.2","telepresence_video_communication_server_vcs_expressway X8.8.3","telepresence_video_communication_server_vcs_expressway X8.11.0","telepresence_video_communication_server_vcs_expressway X12.5.2","telepresence_video_communication_server_vcs_expressway X8.1.1","telepresence_video_communication_server_vcs_expressway X8.9","telepresence_video_communication_server_vcs_expressway X12.5.1","telepresence_video_communication_server_vcs_expressway X12.5.6","telepresence_video_communication_server_vcs_expressway X8.7.3","telepresence_video_communication_server_vcs_expressway X12.6.0","telepresence_video_communication_server_vcs_expressway X8.11.1","telepresence_video_communication_server_vcs_expressway X8.5","telepresence_video_communication_server_vcs_expressway X8.9.1","telepresence_video_communication_server_vcs_expressway X8.10.2","telepresence_video_communication_server_vcs_expressway X8.8.2","telepresence_video_communication_server_vcs_expressway X8.5.3","telepresence_video_communication_server_vcs_expressway X8.1","telepresence_video_communication_server_vcs_expressway X8.9.2","telepresence_video_communication_server_vcs_expressway X8.11.4","telepresence_video_communication_server_vcs_expressway X12.5.4","telepresence_video_communication_server_vcs_expressway X8.8.1","telepresence_video_communication_server_vcs_expressway X8.2.1","telepresence_video_communication_server_vcs_expressway X8.5.1","telepresence_video_communication_server_vcs_expressway X8.6.1","telepresence_video_communication_server_vcs_expressway X8.1.2","telepresence_video_communication_server_vcs_expressway X8.8","telepresence_video_communication_server_vcs_expressway X8.10.0","telepresence_video_communication_server_vcs_expressway X12.5.3","telepresence_video_communication_server_vcs_expressway X8.10.1","telepresence_video_communication_server_vcs_expressway X12.5.7","telepresence_video_communication_server_vcs_expressway X8.10.3","telepresence_video_communication_server_vcs_expressway X8.7.1","telepresence_video_communication_server_vcs_expressway X8.2","telepresence_video_communication_server_vcs_expressway X12.5.8","telepresence_video_communication_server_vcs_expressway X8.7","telepresence_video_communication_server_vcs_expressway X8.5.2","telepresence_video_communication_server_vcs_expressway X12.5.9","telepresence_video_communication_server_vcs_expressway X12.5.0","telepresence_video_communication_server_vcs_expressway X8.10.4","telepresence_video_communication_server_vcs_expressway X8.7.2","telepresence_video_communication_server_vcs_expressway X12.5.5","telepresence_video_communication_server_vcs_expressway X12.6.1","telepresence_video_communication_server_vcs_expressway X12.6.2","telepresence_video_communication_server_vcs_expressway X12.6.3","telepresence_video_communication_server_vcs_expressway X12.6.4","telepresence_video_communication_server_vcs_expressway X12.7.0","telepresence_video_communication_server_vcs_expressway X12.7.1"],"published":"2026-10-21","updated":"2026-10-21","sourceUpdated":"2026-10-21T16:17:29.557Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-76490","references":[{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-exwy-hardening-FhcqBVcs","label":"cisco-sa-exwy-hardening-FhcqBVcs"}],"tags":["cve.org"],"ingestedAt":"2026-10-21T17:07:51.298Z","slug":"CVE-2026-76490","body":"## Overview\n\nAs part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.  \r\n\r\nThe vulnerabilities tracked by CVE-2026-76490 are related to issues concerning out-of-bounds writes that are grouped under the Common Weakness Enumeration (CWE) Base CWE-787.\n\n## Affected\n\n- `telepresence_video_communication_server_vcs_expressway X8.11.2`\n- `telepresence_video_communication_server_vcs_expressway X8.6`\n- `telepresence_video_communication_server_vcs_expressway X8.11.3`\n- `telepresence_video_communication_server_vcs_expressway X8.2.2`\n- `telepresence_video_communication_server_vcs_expressway X8.8.3`\n- `telepresence_video_communication_server_vcs_expressway X8.11.0`\n- `telepresence_video_communication_server_vcs_expressway X12.5.2`\n- `telepresence_video_communication_server_vcs_expressway X8.1.1`\n- `telepresence_video_communication_server_vcs_expressway X8.9`\n- `telepresence_video_communication_server_vcs_expressway X12.5.1`\n- `telepresence_video_communication_server_vcs_expressway X12.5.6`\n- `telepresence_video_communication_server_vcs_expressway X8.7.3`\n- `telepresence_video_communication_server_vcs_expressway X12.6.0`\n- `telepresence_video_communication_server_vcs_expressway X8.11.1`\n- `telepresence_video_communication_server_vcs_expressway X8.5`\n- `telepresence_video_communication_server_vcs_expressway X8.9.1`\n- `telepresence_video_communication_server_vcs_expressway X8.10.2`\n- `telepresence_video_communication_server_vcs_expressway X8.8.2`\n- `telepresence_video_communication_server_vcs_expressway X8.5.3`\n- `telepresence_video_communication_server_vcs_expressway X8.1`\n- `telepresence_video_communication_server_vcs_expressway X8.9.2`\n- `telepresence_video_communication_server_vcs_expressway X8.11.4`\n- `telepresence_video_communication_server_vcs_expressway X12.5.4`\n- `telepresence_video_communication_server_vcs_expressway X8.8.1`\n- `telepresence_video_communication_server_vcs_expressway X8.2.1`\n- `telepresence_video_communication_server_vcs_expressway X8.5.1`\n- `telepresence_video_communication_server_vcs_expressway X8.6.1`\n- `telepresence_video_communication_server_vcs_expressway X8.1.2`\n- `telepresence_video_communication_server_vcs_expressway X8.8`\n- `telepresence_video_communication_server_vcs_expressway X8.10.0`\n- `telepresence_video_communication_server_vcs_expressway X12.5.3`\n- `telepresence_video_communication_server_vcs_expressway X8.10.1`\n- `telepresence_video_communication_server_vcs_expressway X12.5.7`\n- `telepresence_video_communication_server_vcs_expressway X8.10.3`\n- `telepresence_video_communication_server_vcs_expressway X8.7.1`\n- `telepresence_video_communication_server_vcs_expressway X8.2`\n- `telepresence_video_communication_server_vcs_expressway X12.5.8`\n- `telepresence_video_communication_server_vcs_expressway X8.7`\n- `telepresence_video_communication_server_vcs_expressway X8.5.2`\n- `telepresence_video_communication_server_vcs_expressway X12.5.9`\n- `telepresence_video_communication_server_vcs_expressway X12.5.0`\n- `telepresence_video_communication_server_vcs_expressway X8.10.4`\n- `telepresence_video_communication_server_vcs_expressway X8.7.2`\n- `telepresence_video_communication_server_vcs_expressway X12.5.5`\n- `telepresence_video_communication_server_vcs_expressway X12.6.1`\n- `telepresence_video_communication_server_vcs_expressway X12.6.2`\n- `telepresence_video_communication_server_vcs_expressway X12.6.3`\n- `telepresence_video_communication_server_vcs_expressway X12.6.4`\n- `telepresence_video_communication_server_vcs_expressway X12.7.0`\n- `telepresence_video_communication_server_vcs_expressway X12.7.1`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":47,"depthScoreParts":{"impact":47.3,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}