Live › vulnerability › CVE-2026-76435
Go to dashboardCisco Expressway Core and Edge devices do not check authorization on certain HTTP requests made during Mobile and Remote Access provisioning. A remote attacker can send a crafted URL request without logging in and read sensitive information the device would normally protect.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Organizations running Cisco Expressway Core (Expressway-C) or Expressway Edge (Expressway-E) devices with Mobile and Remote Access enabled are the ones exposed. Sources do not say which software versions are affected or whether MRA must be enabled to be exploitable, so check the Cisco advisory before ruling anyone out.
No product ranges from the sources yet.
Unknown from the sources.
Unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A vulnerability in Cisco Expressway Series could allow an unauthenticated, remote attacker to obtain sensitive information from an affected device.
This vulnerability is due to insufficient authorization checks of HTTP requests during Mobile and Remote Access (MRA) provisioning. An attacker could exploit this vulnerability by submitting a crafted URL request to an affected device. A successful exploit could allow the attacker to access sensitive information that they would otherwise not have authorization to access. Note: Cisco Expressway Series refers to Cisco Expressway Core (Expressway-C) devices and Cisco Expressway Edge (Expressway-E) devices.
This page as .md · .json · in your agent: get_signal("CVE-2026-76435")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.