CVE-2026-76490: Cisco Expressway Series Software Hardening Release: October 2026 - Out-of-bounds Write Vulnerabilities
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76490 are related to issues concerning out-of-bounds writes that are grouped under the Common Weakness Enumeration (CWE) Base CWE-787.
Affected Software
Event History
Frequently Asked Questions
What impact could successful exploitation have?
The advisory data rates the issue as high severity with an 8.6 CVSS score. Its vector indicates network-based exploitation with low attack complexity, no privileges or user interaction required, and a high availability impact; confidentiality and integrity impacts are listed as none.
Does exploitation require authentication or user interaction?
No. The supplied CVSS vector lists PR:N and UI:N, meaning no privileges and no user interaction are required.
Is this remotely exploitable?
The CVSS vector lists AV:N, indicating that the vulnerability is reachable over a network.