Live › vulnerability › CVE-2026-76495
Go to dashboardCisco's October 2026 Expressway hardening release groups internally found flaws. CVE-2026-76495 covers the incorrect permission assignment (CWE-732) flaws, with a maximum score of 7.8 (local access, low privileges). Cisco says none are known to be exploited and gives no per-flaw detail.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Every Cisco Expressway-C and Expressway-E, virtual or appliance, on X15.5.3 and earlier or X14 and earlier, regardless of configuration. Cisco rates the permission flaws as local with low privileges required, so the risk is mainly an attacker who already has a foothold or account on the device. There is no configuration that avoids it.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Cisco Expressway Series | vendor | <= X15.5.3; X14 and earlier | X15.5.20 |
xstatus SystemUnit on the CLIEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.
The vulnerabilities tracked by CVE-2026-76495 are related to issues concerning incorrect permission assignments that are grouped under the Common Weakness Enumeration (CWE) Variant CWE-732.
This page as .md · .json · in your agent: get_signal("CVE-2026-76495")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.