{"id":"CVE-2026-76496","kind":"vulnerability","aliases":["CVE-2026-76496"],"related":[],"title":"Cisco Expressway: hardening release fixes multiple improper link resolution flaws","description":"As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.  \r\n\r\nThe vulnerabilities tracked by CVE-2026-76496 are related to issues concerning improper link resolutions that are grouped under the Common Weakness Enumeration (CWE) Base CWE-59.","summary":"Cisco Expressway Series contains several internally found flaws in how it resolves links, classified as CWE-59 (improper link resolution before file access). The sources do not state what an attacker can do with them beyond that classification.","severity":"high","cvss":7.0,"epss":0.00122,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["cisco-expressway","self-hosted","vendor","video-collaboration"],"not_affected_if":[],"how_to_check":"- Check the installed Expressway software version against the fixed releases listed in Cisco's advisory (not in the sources; unknown).","fix":"- Upgrade Cisco Expressway to the hardening release named in Cisco's security advisory (version unknown from the sources).","status":"open","published_at":"2026-10-21T17:19:09+00:00","first_seen_at":"2026-10-23T21:57:29+00:00","triaged_at":"2026-10-25T03:38:08+00:00","updated_at":"2026-10-25T03:38:08+00:00","category":"vendor","confidence":0.4,"triage":{"at":"2026-10-25T03:38:08Z","model":"claude-haiku-5-5","output":{"fix":"- Upgrade Cisco Expressway to the hardening release named in Cisco's security advisory (version unknown from the sources).","reach":"unknown","title":"Cisco Expressway: hardening release fixes multiple improper link resolution flaws","impact":"medium","summary":"Cisco Expressway Series contains several internally found flaws in how it resolves links, classified as CWE-59 (improper link resolution before file access). The sources do not state what an attacker can do with them beyond that classification.","category":"vendor","nicknames":[],"who_cares":["cisco-expressway","self-hosted","video-collaboration"],"confidence":0.4,"needs_auth":"unknown","worst_case":"unknown; the sources only name CWE-59 link resolution flaws","analyst_note":"Pull Cisco's advisory for affected and fixed Expressway versions and the actual impact; the NVD entry gives only CVSS 7.0 and CWE-59.","how_to_check":"- Check the installed Expressway software version against the fixed releases listed in Cisco's advisory (not in the sources; unknown).","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Organizations running Cisco Expressway Series software, which is used for video and collaboration traffic traversal. The sources do not say which configurations or roles are exposed, so the exact scope is unknown.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000594,"input_tokens":3417,"output_tokens":505,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-2026':12A,15A,110C '-59':43B,131C '-76496':13A,16A,111C 'access':49B 'address':100C 'attack':57B 'base':129C 'beyond':62B 'cisco':1A,18B,27B,68C,79C 'cisco-expressway':17B 'classif':64B 'classifi':40B 'collabor':26B 'commit':71C 'common':125C 'comprehens':88C 'concern':116C 'conduct':86C 'contain':30B 'cve':11A,14A,109C 'cwe':42B,128C,130C 'discov':103C 'engin':83C 'enumer':127C 'expressway':2A,19B,28B,80C 'file':48B 'fix':5A 'flaw':10A,34B 'found':33B 'group':122C 'harden':3A,97C 'host':22B 'improp':7A,44B,117C 'intern':32B,89C,102C 'issu':115C 'link':8A,39B,45B,118C 'multipl':6A,101C 'ongo':70C 'part':66C 'proactiv':73C 'product':76C 'qualiti':77C 'relat':113C 'releas':4A,98C 'resolut':9A,46B,119C 'resolv':38B 'result':94C 'review':91C,93C 'secur':74C,90C 'self':21B 'self-host':20B 'seri':29B,81C 'sever':31B 'softwar':82C,96C 'sourc':51B 'state':54B 'team':84C 'track':107C 'vendor':23B 'video':25B 'video-collabor':24B 'vulner':104C,106C 'weak':126C","nicknames":[],"mitigations":[],"who_affected":"Organizations running Cisco Expressway Series software, which is used for video and collaboration traffic traversal. The sources do not say which configurations or roles are exposed, so the exact scope is unknown.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-21T17:19:09+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss_by":"psirt@cisco.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-76496","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-76496","severity":null,"published_at":"2026-10-21T17:19:09+00:00","modified_at":"2026-10-22T23:19:08+00:00","first_seen_at":"2026-10-23T21:57:29+00:00","fetched_at":"2026-10-23T22:29:01+00:00","note":null},{"source":"epss","external_id":"CVE-2026-76496","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-76496","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-24T13:15:54+00:00","fetched_at":"2026-10-24T13:15:54+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}