CVE-2026-76491

HighCVSS 7.5/10Last modified Oct 22, 2026

Description

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.   The vulnerabilities tracked by CVE-2026-76491 are related to issues concerning reachable assertions that are grouped under the Common Weakness Enumeration (CWE) Base CWE-617.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-617

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Oct 21, 2026
Last modified
Oct 22, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-764927.5As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has cCVE-2026-764937.5As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has cCVE-2026-764947.8As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has cCVE-2026-764957.8As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has cCVE-2026-764967.0As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has cCVE-2026-764976.6As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has cCVE-2026-764989.8As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Application Policy Infrastructure Controller (APICVE-2026-764999.8As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Application Policy Infrastructure Controller (APICVE-2026-76506.4The E2Pdf – Export Pdf Tool for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' attribute of the `eCVE-2026-765009.8As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Application Policy Infrastructure Controller (APICVE-2026-765019.8A vulnerability in the Segment Routing over IPv6 (SRv6) Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software, knCVE-2026-765049.8A vulnerability in the API session-based authentication management of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote a
CVE-2026-76491: High severity, CVSS 7.5 | Vulnix