---
id: CVE-2026-76496
title: >-
  Cisco Expressway Series Software Hardening Release: October 2026 - Improper
  Link Resolution Vulnerabilities
summary: >-
  As part of Cisco's ongoing commitment to proactive security and product
  quality, the Cisco Expressway Series software engineering team has conducted a
  comprehensive internal security review. This review resulted in software
  hardening rel…
severity: high
cvss: 7
cvssVector: 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'
cvssSource: cna
cwe:
  - CWE-59
vendor: Cisco
product: Cisco TelePresence Video Communication Server (VCS) Expressway
affected:
  - telepresence_video_communication_server_vcs_expressway X8.11.2
  - telepresence_video_communication_server_vcs_expressway X8.6
  - telepresence_video_communication_server_vcs_expressway X8.11.3
  - telepresence_video_communication_server_vcs_expressway X8.2.2
  - telepresence_video_communication_server_vcs_expressway X8.8.3
  - telepresence_video_communication_server_vcs_expressway X8.11.0
  - telepresence_video_communication_server_vcs_expressway X12.5.2
  - telepresence_video_communication_server_vcs_expressway X8.1.1
  - telepresence_video_communication_server_vcs_expressway X8.9
  - telepresence_video_communication_server_vcs_expressway X12.5.1
  - telepresence_video_communication_server_vcs_expressway X12.5.6
  - telepresence_video_communication_server_vcs_expressway X8.7.3
  - telepresence_video_communication_server_vcs_expressway X12.6.0
  - telepresence_video_communication_server_vcs_expressway X8.11.1
  - telepresence_video_communication_server_vcs_expressway X8.5
  - telepresence_video_communication_server_vcs_expressway X8.9.1
  - telepresence_video_communication_server_vcs_expressway X8.10.2
  - telepresence_video_communication_server_vcs_expressway X8.8.2
  - telepresence_video_communication_server_vcs_expressway X8.5.3
  - telepresence_video_communication_server_vcs_expressway X8.1
  - telepresence_video_communication_server_vcs_expressway X8.9.2
  - telepresence_video_communication_server_vcs_expressway X8.11.4
  - telepresence_video_communication_server_vcs_expressway X12.5.4
  - telepresence_video_communication_server_vcs_expressway X8.8.1
  - telepresence_video_communication_server_vcs_expressway X8.2.1
  - telepresence_video_communication_server_vcs_expressway X8.5.1
  - telepresence_video_communication_server_vcs_expressway X8.6.1
  - telepresence_video_communication_server_vcs_expressway X8.1.2
  - telepresence_video_communication_server_vcs_expressway X8.8
  - telepresence_video_communication_server_vcs_expressway X8.10.0
  - telepresence_video_communication_server_vcs_expressway X12.5.3
  - telepresence_video_communication_server_vcs_expressway X8.10.1
  - telepresence_video_communication_server_vcs_expressway X12.5.7
  - telepresence_video_communication_server_vcs_expressway X8.10.3
  - telepresence_video_communication_server_vcs_expressway X8.7.1
  - telepresence_video_communication_server_vcs_expressway X8.2
  - telepresence_video_communication_server_vcs_expressway X12.5.8
  - telepresence_video_communication_server_vcs_expressway X8.7
  - telepresence_video_communication_server_vcs_expressway X8.5.2
  - telepresence_video_communication_server_vcs_expressway X12.5.9
  - telepresence_video_communication_server_vcs_expressway X12.5.0
  - telepresence_video_communication_server_vcs_expressway X8.10.4
  - telepresence_video_communication_server_vcs_expressway X8.7.2
  - telepresence_video_communication_server_vcs_expressway X12.5.5
  - telepresence_video_communication_server_vcs_expressway X12.6.1
  - telepresence_video_communication_server_vcs_expressway X12.6.2
  - telepresence_video_communication_server_vcs_expressway X12.6.3
  - telepresence_video_communication_server_vcs_expressway X12.6.4
  - telepresence_video_communication_server_vcs_expressway X12.7.0
  - telepresence_video_communication_server_vcs_expressway X12.7.1
published: '2026-10-21'
updated: '2026-10-21'
sourceUpdated: '2026-10-21T16:18:03.087Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-76496'
references:
  - url: >-
      https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-exwy-hardening-FhcqBVcs
    label: cisco-sa-exwy-hardening-FhcqBVcs
tags:
  - cve.org
ingestedAt: '2026-10-21T17:07:51.297Z'
---

## Overview

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.  

The vulnerabilities tracked by CVE-2026-76496 are related to issues concerning improper link resolutions that are grouped under the Common Weakness Enumeration (CWE) Base CWE-59.

## Affected

- `telepresence_video_communication_server_vcs_expressway X8.11.2`
- `telepresence_video_communication_server_vcs_expressway X8.6`
- `telepresence_video_communication_server_vcs_expressway X8.11.3`
- `telepresence_video_communication_server_vcs_expressway X8.2.2`
- `telepresence_video_communication_server_vcs_expressway X8.8.3`
- `telepresence_video_communication_server_vcs_expressway X8.11.0`
- `telepresence_video_communication_server_vcs_expressway X12.5.2`
- `telepresence_video_communication_server_vcs_expressway X8.1.1`
- `telepresence_video_communication_server_vcs_expressway X8.9`
- `telepresence_video_communication_server_vcs_expressway X12.5.1`
- `telepresence_video_communication_server_vcs_expressway X12.5.6`
- `telepresence_video_communication_server_vcs_expressway X8.7.3`
- `telepresence_video_communication_server_vcs_expressway X12.6.0`
- `telepresence_video_communication_server_vcs_expressway X8.11.1`
- `telepresence_video_communication_server_vcs_expressway X8.5`
- `telepresence_video_communication_server_vcs_expressway X8.9.1`
- `telepresence_video_communication_server_vcs_expressway X8.10.2`
- `telepresence_video_communication_server_vcs_expressway X8.8.2`
- `telepresence_video_communication_server_vcs_expressway X8.5.3`
- `telepresence_video_communication_server_vcs_expressway X8.1`
- `telepresence_video_communication_server_vcs_expressway X8.9.2`
- `telepresence_video_communication_server_vcs_expressway X8.11.4`
- `telepresence_video_communication_server_vcs_expressway X12.5.4`
- `telepresence_video_communication_server_vcs_expressway X8.8.1`
- `telepresence_video_communication_server_vcs_expressway X8.2.1`
- `telepresence_video_communication_server_vcs_expressway X8.5.1`
- `telepresence_video_communication_server_vcs_expressway X8.6.1`
- `telepresence_video_communication_server_vcs_expressway X8.1.2`
- `telepresence_video_communication_server_vcs_expressway X8.8`
- `telepresence_video_communication_server_vcs_expressway X8.10.0`
- `telepresence_video_communication_server_vcs_expressway X12.5.3`
- `telepresence_video_communication_server_vcs_expressway X8.10.1`
- `telepresence_video_communication_server_vcs_expressway X12.5.7`
- `telepresence_video_communication_server_vcs_expressway X8.10.3`
- `telepresence_video_communication_server_vcs_expressway X8.7.1`
- `telepresence_video_communication_server_vcs_expressway X8.2`
- `telepresence_video_communication_server_vcs_expressway X12.5.8`
- `telepresence_video_communication_server_vcs_expressway X8.7`
- `telepresence_video_communication_server_vcs_expressway X8.5.2`
- `telepresence_video_communication_server_vcs_expressway X12.5.9`
- `telepresence_video_communication_server_vcs_expressway X12.5.0`
- `telepresence_video_communication_server_vcs_expressway X8.10.4`
- `telepresence_video_communication_server_vcs_expressway X8.7.2`
- `telepresence_video_communication_server_vcs_expressway X12.5.5`
- `telepresence_video_communication_server_vcs_expressway X12.6.1`
- `telepresence_video_communication_server_vcs_expressway X12.6.2`
- `telepresence_video_communication_server_vcs_expressway X12.6.3`
- `telepresence_video_communication_server_vcs_expressway X12.6.4`
- `telepresence_video_communication_server_vcs_expressway X12.7.0`
- `telepresence_video_communication_server_vcs_expressway X12.7.1`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.