Live › vulnerability › CVE-2026-76494
Go to dashboardCisco Expressway Series contains code injection flaws classified as CWE-94, which are tracked under CVE-2026-76494. The sources do not state the exact attacker capability beyond the CWE, but CWE-94 issues generally let an attacker run code on the affected system.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Organizations running Cisco Expressway Series software, the video and collaboration gateway. The sources do not describe which configurations or roles are exposed, so whether a given deployment is affected is unknown.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.
The vulnerabilities tracked by CVE-2026-76494 are related to issues concerning code injections that are grouped under the Common Weakness Enumeration (CWE) Base CWE-94.
This page as .md · .json · in your agent: get_signal("CVE-2026-76494")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.