{"id":"CVE-2026-76497","title":"Cisco Expressway Series Software Hardening Release: October 2026 - Insecure Temporary File Vulnerabilities","summary":"As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening rel…","severity":"medium","cvss":6.6,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H","cvssSource":"cna","cwe":["CWE-377"],"vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","affected":["telepresence_video_communication_server_vcs_expressway X8.11.2","telepresence_video_communication_server_vcs_expressway X8.6","telepresence_video_communication_server_vcs_expressway X8.11.3","telepresence_video_communication_server_vcs_expressway X8.2.2","telepresence_video_communication_server_vcs_expressway X8.8.3","telepresence_video_communication_server_vcs_expressway X8.11.0","telepresence_video_communication_server_vcs_expressway X12.5.2","telepresence_video_communication_server_vcs_expressway X8.1.1","telepresence_video_communication_server_vcs_expressway X8.9","telepresence_video_communication_server_vcs_expressway X12.5.1","telepresence_video_communication_server_vcs_expressway X12.5.6","telepresence_video_communication_server_vcs_expressway X8.7.3","telepresence_video_communication_server_vcs_expressway X12.6.0","telepresence_video_communication_server_vcs_expressway X8.11.1","telepresence_video_communication_server_vcs_expressway X8.5","telepresence_video_communication_server_vcs_expressway X8.9.1","telepresence_video_communication_server_vcs_expressway X8.10.2","telepresence_video_communication_server_vcs_expressway X8.8.2","telepresence_video_communication_server_vcs_expressway X8.5.3","telepresence_video_communication_server_vcs_expressway X8.1","telepresence_video_communication_server_vcs_expressway X8.9.2","telepresence_video_communication_server_vcs_expressway X8.11.4","telepresence_video_communication_server_vcs_expressway X12.5.4","telepresence_video_communication_server_vcs_expressway X8.8.1","telepresence_video_communication_server_vcs_expressway X8.2.1","telepresence_video_communication_server_vcs_expressway X8.5.1","telepresence_video_communication_server_vcs_expressway X8.6.1","telepresence_video_communication_server_vcs_expressway X8.1.2","telepresence_video_communication_server_vcs_expressway X8.8","telepresence_video_communication_server_vcs_expressway X8.10.0","telepresence_video_communication_server_vcs_expressway X12.5.3","telepresence_video_communication_server_vcs_expressway X8.10.1","telepresence_video_communication_server_vcs_expressway X12.5.7","telepresence_video_communication_server_vcs_expressway X8.10.3","telepresence_video_communication_server_vcs_expressway X8.7.1","telepresence_video_communication_server_vcs_expressway X8.2","telepresence_video_communication_server_vcs_expressway X12.5.8","telepresence_video_communication_server_vcs_expressway X8.7","telepresence_video_communication_server_vcs_expressway X8.5.2","telepresence_video_communication_server_vcs_expressway X12.5.9","telepresence_video_communication_server_vcs_expressway X12.5.0","telepresence_video_communication_server_vcs_expressway X8.10.4","telepresence_video_communication_server_vcs_expressway X8.7.2","telepresence_video_communication_server_vcs_expressway X12.5.5","telepresence_video_communication_server_vcs_expressway X12.6.1","telepresence_video_communication_server_vcs_expressway X12.6.2","telepresence_video_communication_server_vcs_expressway X12.6.3","telepresence_video_communication_server_vcs_expressway X12.6.4","telepresence_video_communication_server_vcs_expressway X12.7.0","telepresence_video_communication_server_vcs_expressway X12.7.1"],"published":"2026-10-21","updated":"2026-10-21","sourceUpdated":"2026-10-21T16:18:13.854Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-76497","references":[{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-exwy-hardening-FhcqBVcs","label":"cisco-sa-exwy-hardening-FhcqBVcs"}],"tags":["cve.org"],"ingestedAt":"2026-10-21T17:07:51.295Z","slug":"CVE-2026-76497","body":"## Overview\n\nAs part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.  \r\n\r\nThe vulnerabilities tracked by CVE-2026-76497 are related to issues concerning insecure temporary files that are grouped under the Common Weakness Enumeration (CWE) Base CWE-377.\n\n## Affected\n\n- `telepresence_video_communication_server_vcs_expressway X8.11.2`\n- `telepresence_video_communication_server_vcs_expressway X8.6`\n- `telepresence_video_communication_server_vcs_expressway X8.11.3`\n- `telepresence_video_communication_server_vcs_expressway X8.2.2`\n- `telepresence_video_communication_server_vcs_expressway X8.8.3`\n- `telepresence_video_communication_server_vcs_expressway X8.11.0`\n- `telepresence_video_communication_server_vcs_expressway X12.5.2`\n- `telepresence_video_communication_server_vcs_expressway X8.1.1`\n- `telepresence_video_communication_server_vcs_expressway X8.9`\n- `telepresence_video_communication_server_vcs_expressway X12.5.1`\n- `telepresence_video_communication_server_vcs_expressway X12.5.6`\n- `telepresence_video_communication_server_vcs_expressway X8.7.3`\n- `telepresence_video_communication_server_vcs_expressway X12.6.0`\n- `telepresence_video_communication_server_vcs_expressway X8.11.1`\n- `telepresence_video_communication_server_vcs_expressway X8.5`\n- `telepresence_video_communication_server_vcs_expressway X8.9.1`\n- `telepresence_video_communication_server_vcs_expressway X8.10.2`\n- `telepresence_video_communication_server_vcs_expressway X8.8.2`\n- `telepresence_video_communication_server_vcs_expressway X8.5.3`\n- `telepresence_video_communication_server_vcs_expressway X8.1`\n- `telepresence_video_communication_server_vcs_expressway X8.9.2`\n- `telepresence_video_communication_server_vcs_expressway X8.11.4`\n- `telepresence_video_communication_server_vcs_expressway X12.5.4`\n- `telepresence_video_communication_server_vcs_expressway X8.8.1`\n- `telepresence_video_communication_server_vcs_expressway X8.2.1`\n- `telepresence_video_communication_server_vcs_expressway X8.5.1`\n- `telepresence_video_communication_server_vcs_expressway X8.6.1`\n- `telepresence_video_communication_server_vcs_expressway X8.1.2`\n- `telepresence_video_communication_server_vcs_expressway X8.8`\n- `telepresence_video_communication_server_vcs_expressway X8.10.0`\n- `telepresence_video_communication_server_vcs_expressway X12.5.3`\n- `telepresence_video_communication_server_vcs_expressway X8.10.1`\n- `telepresence_video_communication_server_vcs_expressway X12.5.7`\n- `telepresence_video_communication_server_vcs_expressway X8.10.3`\n- `telepresence_video_communication_server_vcs_expressway X8.7.1`\n- `telepresence_video_communication_server_vcs_expressway X8.2`\n- `telepresence_video_communication_server_vcs_expressway X12.5.8`\n- `telepresence_video_communication_server_vcs_expressway X8.7`\n- `telepresence_video_communication_server_vcs_expressway X8.5.2`\n- `telepresence_video_communication_server_vcs_expressway X12.5.9`\n- `telepresence_video_communication_server_vcs_expressway X12.5.0`\n- `telepresence_video_communication_server_vcs_expressway X8.10.4`\n- `telepresence_video_communication_server_vcs_expressway X8.7.2`\n- `telepresence_video_communication_server_vcs_expressway X12.5.5`\n- `telepresence_video_communication_server_vcs_expressway X12.6.1`\n- `telepresence_video_communication_server_vcs_expressway X12.6.2`\n- `telepresence_video_communication_server_vcs_expressway X12.6.3`\n- `telepresence_video_communication_server_vcs_expressway X12.6.4`\n- `telepresence_video_communication_server_vcs_expressway X12.7.0`\n- `telepresence_video_communication_server_vcs_expressway X12.7.1`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":36,"depthScoreParts":{"impact":36.3,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}