CVE-2026-76490
Full vulnerability record from the local CVENow database.
Description
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76490 are related to issues concerning out-of-bounds writes that are grouped under the Common Weakness Enumeration (CWE) Base CWE-787.
Severity
HIGH
CVSS score
8.6
(v3.1)
Vulnerability status
Awaiting Analysis
Source identifier
Published
2026-10-21 17:19:08.340000
Last modified
2026-10-22 14:17:47.227000
View original CVE JSON
{
"id": "CVE-2026-76490",
"sourceIdentifier": "[email protected]",
"published": "2026-10-21T17:19:08.340",
"lastModified": "2026-10-22T14:17:47.227",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. \r\n\r\nThe vulnerabilities tracked by CVE-2026-76490 are related to issues concerning out-of-bounds writes that are grouped under the Common Weakness Enumeration (CWE) Base CWE-787."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "Cisco",
"product": "Cisco TelePresence Video Communication Server (VCS) Expressway",
"defaultStatus": "unknown",
"versions": [
{
"version": "X8.11.2",
"status": "affected"
},
{
"version": "X8.6",
"status": "affected"
},
{
"version": "X8.11.3",
"status": "affected"
},
{
"version": "X8.2.2",
"status": "affected"
},
{
"version": "X8.8.3",
"status": "affected"
},
{
"version": "X8.11.0",
"status": "affected"
},
{
"version": "X12.5.2",
"status": "affected"
},
{
"version": "X8.1.1",
"status": "affected"
},
{
"version": "X8.9",
"status": "affected"
},
{
"version": "X12.5.1",
"status": "affected"
},
{
"version": "X12.5.6",
"status": "affected"
},
{
"version": "X8.7.3",
"status": "affected"
},
{
"version": "X12.6.0",
"status": "affected"
},
{
"version": "X8.11.1",
"status": "affected"
},
{
"version": "X8.5",
"status": "affected"
},
{
"version": "X8.9.1",
"status": "affected"
},
{
"version": "X8.10.2",
"status": "affected"
},
{
"version": "X8.8.2",
"status": "affected"
},
{
"version": "X8.5.3",
"status": "affected"
},
{
"version": "X8.1",
"status": "affected"
},
{
"version": "X8.9.2",
"status": "affected"
},
{
"version": "X8.11.4",
"status": "affected"
},
{
"version": "X12.5.4",
"status": "affected"
},
{
"version": "X8.8.1",
"status": "affected"
},
{
"version": "X8.2.1",
"status": "affected"
},
{
"version": "X8.5.1",
"status": "affected"
},
{
"version": "X8.6.1",
"status": "affected"
},
{
"version": "X8.1.2",
"status": "affected"
},
{
"version": "X8.8",
"status": "affected"
},
{
"version": "X8.10.0",
"status": "affected"
},
{
"version": "X12.5.3",
"status": "affected"
},
{
"version": "X8.10.1",
"status": "affected"
},
{
"version": "X12.5.7",
"status": "affected"
},
{
"version": "X8.10.3",
"status": "affected"
},
{
"version": "X8.7.1",
"status": "affected"
},
{
"version": "X8.2",
"status": "affected"
},
{
"version": "X12.5.8",
"status": "affected"
},
{
"version": "X8.7",
"status": "affected"
},
{
"version": "X8.5.2",
"status": "affected"
},
{
"version": "X12.5.9",
"status": "affected"
},
{
"version": "X12.5.0",
"status": "affected"
},
{
"version": "X8.10.4",
"status": "affected"
},
{
"version": "X8.7.2",
"status": "affected"
},
{
"version": "X12.5.5",
"status": "affected"
},
{
"version": "X12.6.1",
"status": "affected"
},
{
"version": "X12.6.2",
"status": "affected"
},
{
"version": "X12.6.3",
"status": "affected"
},
{
"version": "X12.6.4",
"status": "affected"
},
{
"version": "X12.7.0",
"status": "affected"
},
{
"version": "X12.7.1",
"status": "affected"
},
{
"version": "X14.0.0",
"status": "affected"
},
{
"version": "X14.0.1",
"status": "affected"
},
{
"version": "X14.0.2",
"status": "affected"
},
{
"version": "X14.0.3",
"status": "affected"
},
{
"version": "X14.0.4",
"status": "affected"
},
{
"version": "X14.0.5",
"status": "affected"
},
{
"version": "X14.0.6",
"status": "affected"
},
{
"version": "X14.0.7",
"status": "affected"
},
{
"version": "X14.0.8",
"status": "affected"
},
{
"version": "X14.2.0",
"status": "affected"
},
{
"version": "X14.0.9",
"status": "affected"
},
{
"version": "X14.2.1",
"status": "affected"
},
{
"version": "X14.2.2",
"status": "affected"
},
{
"version": "X14.0.11",
"status": "affected"
},
{
"version": "X14.2.5",
"status": "affected"
},
{
"version": "X14.0.10",
"status": "affected"
},
{
"version": "X14.2.6",
"status": "affected"
},
{
"version": "X14.2.7",
"status": "affected"
},
{
"version": "X14.3.0",
"status": "affected"
},
{
"version": "X14.3.1",
"status": "affected"
},
{
"version": "X14.3.2",
"status": "affected"
},
{
"version": "X14.3.3",
"status": "affected"
},
{
"version": "X15.0.0",
"status": "affected"
},
{
"version": "X14.3.4",
"status": "affected"
},
{
"version": "X14.3.5",
"status": "affected"
},
{
"version": "X15.0.1",
"status": "affected"
},
{
"version": "X15.0.2",
"status": "affected"
},
{
"version": "X15.0.3",
"status": "affected"
},
{
"version": "X14.3.6",
"status": "affected"
},
{
"version": "X15.2.0",
"status": "affected"
},
{
"version": "X15.2.1",
"status": "affected"
},
{
"version": "X15.2.2",
"status": "affected"
},
{
"version": "X15.2.3",
"status": "affected"
},
{
"version": "X14.3.7",
"status": "affected"
},
{
"version": "X15.2.4.",
"status": "affected"
},
{
"version": "X15.2.4",
"status": "affected"
},
{
"version": "X15.3.0",
"status": "affected"
},
{
"version": "X15.3.1",
"status": "affected"
},
{
"version": "X15.3.2",
"status": "affected"
},
{
"version": "X15.4.0",
"status": "affected"
},
{
"version": "X15.5.0",
"status": "affected"
},
{
"version": "X15.5.1",
"status": "affected"
},
{
"version": "X15.5.2",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 4.0
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2026-10-21T17:14:36.090879Z",
"id": "CVE-2026-76490",
"options": [
{
"exploitation": "none"
},
{
"automatable": "yes"
},
{
"technicalImpact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-787"
}
]
}
],
"references": [
{
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-exwy-hardening-FhcqBVcs",
"source": "[email protected]"
}
]
}