CVE-2026-76490

HighCVSS 8.6/10Last modified Oct 22, 2026

Description

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.   The vulnerabilities tracked by CVE-2026-76490 are related to issues concerning out-of-bounds writes that are grouped under the Common Weakness Enumeration (CWE) Base CWE-787.

Metrics

CVSS 3.1 8.6/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Weakness enumeration

CWE-787

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
CiscoCisco TelePresence Video Communication Server (VCS) ExpresswayX8.11.2; X8.6; X8.11.3; X8.2.2; X8.8.3; X8.11.0; X12.5.2; X8.1.1; X8.9; X12.5.1; X12.5.6; X8.7.3; X12.6.0; X8.11.1; X8.5; X8.9.1; X8.10.2; X8.8.2; X8.5.3; X8.1

References

Timeline

Published
Oct 21, 2026
Last modified
Oct 22, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-764917.5As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has cCVE-2026-764927.5As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has cCVE-2026-764937.5As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has cCVE-2026-764947.8As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has cCVE-2026-764957.8As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has cCVE-2026-764967.0As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has cCVE-2026-764976.6As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has cCVE-2026-764989.8As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Application Policy Infrastructure Controller (APICVE-2026-764999.8As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Application Policy Infrastructure Controller (APICVE-2026-76506.4The E2Pdf – Export Pdf Tool for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' attribute of the `eCVE-2026-765009.8As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Application Policy Infrastructure Controller (APICVE-2026-765019.8A vulnerability in the Segment Routing over IPv6 (SRv6) Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software, kn
CVE-2026-76490: High severity, CVSS 8.6 | Vulnix