{"id":"CVE-2026-76493","kind":"vulnerability","aliases":["CVE-2026-76493"],"related":[],"title":"Cisco Expressway: uncaught exceptions in hardening releases allow service disruption","description":"As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.  \r\n\r\nThe vulnerabilities tracked by CVE-2026-76493 are related to issues concerning uncaught exceptions that are grouped under the Common Weakness Enumeration (CWE) Base CWE-248.","summary":"Cisco Expressway Series software contains uncaught exception flaws (CWE-248) found in an internal security review. The sources do not state what an attacker can do beyond the crash-type weakness class.","severity":"high","cvss":7.5,"epss":0.00263,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["cisco","expressway","infrastructure","self-hosted","video-collaboration"],"not_affected_if":[],"how_to_check":"- Check the installed Cisco Expressway software version against the fixed releases in Cisco's advisory.\n- unknown for further checks; the sources do not name the affected versions.","fix":"- Upgrade Cisco Expressway to a fixed hardening release listed in the Cisco advisory.\n- Exact fixed version: unknown.","status":"open","published_at":"2026-10-21T17:19:08+00:00","first_seen_at":"2026-10-23T21:57:29+00:00","triaged_at":"2026-10-25T03:16:30+00:00","updated_at":"2026-10-25T03:16:30+00:00","category":"infrastructure","confidence":0.4,"triage":{"at":"2026-10-25T03:16:30Z","model":"claude-haiku-5-5","output":{"fix":"- Upgrade Cisco Expressway to a fixed hardening release listed in the Cisco advisory.\n- Exact fixed version: unknown.","reach":"unknown","title":"Cisco Expressway: uncaught exceptions in hardening releases allow service disruption","impact":"medium","summary":"Cisco Expressway Series software contains uncaught exception flaws (CWE-248) found in an internal security review. The sources do not state what an attacker can do beyond the crash-type weakness class.","category":"infrastructure","nicknames":[],"who_cares":["cisco","expressway","video-collaboration","self-hosted"],"confidence":0.4,"needs_auth":"unknown","worst_case":"unknown; uncaught exceptions may crash or disrupt the service","analyst_note":"Find Cisco's advisory for CVE-2026-76493 to get affected and fixed versions, attack prerequisites and the actual impact; NVD page https://nvd.nist.gov/vuln/detail/CVE-2026-76493.","how_to_check":"- Check the installed Cisco Expressway software version against the fixed releases in Cisco's advisory.\n- unknown for further checks; the sources do not name the affected versions.","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Organizations running Cisco Expressway Series appliances or software are the ones to look at. The sources do not list the affected versions or the exact configuration needed to trigger the flaw, so whether a given deployment is exposed is unknown.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000622,"input_tokens":3418,"output_tokens":560,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-2026':12A,15A,104C '-248':35B,124C '-76493':13A,16A,105C 'address':94C 'allow':8A 'attack':49B 'base':122C 'beyond':52B 'cisco':1A,17B,26B,62C,73C 'class':58B 'collabor':25B 'commit':65C 'common':118C 'comprehens':82C 'concern':110C 'conduct':80C 'contain':30B 'crash':55B 'crash-typ':54B 'cve':11A,14A,103C 'cwe':34B,121C,123C 'discov':97C 'disrupt':10A 'engin':77C 'enumer':120C 'except':4A,32B,112C 'expressway':2A,18B,27B,74C 'flaw':33B 'found':36B 'group':115C 'harden':6A,91C 'host':22B 'infrastructur':19B 'intern':39B,83C,96C 'issu':109C 'multipl':95C 'ongo':64C 'part':60C 'proactiv':67C 'product':70C 'qualiti':71C 'relat':107C 'releas':7A,92C 'result':88C 'review':41B,85C,87C 'secur':40B,68C,84C 'self':21B 'self-host':20B 'seri':28B,75C 'servic':9A 'softwar':29B,76C,90C 'sourc':43B 'state':46B 'team':78C 'track':101C 'type':56B 'uncaught':3A,31B,111C 'video':24B 'video-collabor':23B 'vulner':98C,100C 'weak':57B,119C","nicknames":[],"mitigations":[],"who_affected":"Organizations running Cisco Expressway Series appliances or software are the ones to look at. The sources do not list the affected versions or the exact configuration needed to trigger the flaw, so whether a given deployment is exposed is unknown.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-21T17:19:08+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss_by":"psirt@cisco.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-76493","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-76493","severity":null,"published_at":"2026-10-21T17:19:08+00:00","modified_at":"2026-10-22T14:17:47+00:00","first_seen_at":"2026-10-23T21:57:29+00:00","fetched_at":"2026-10-23T22:29:01+00:00","note":null},{"source":"epss","external_id":"CVE-2026-76493","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-76493","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-24T13:15:54+00:00","fetched_at":"2026-10-24T13:15:54+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}