CVE-2026-76494
Awaiting Analysis Awaiting Analysis - Queue

Code Injection Vulnerability in Cisco Expressway Series

Vulnerability report for CVE-2026-76494, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-10-21

Last updated on: 2026-11-07

Assigner: Cisco Systems, Inc.

Description

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.   The vulnerabilities tracked by CVE-2026-76494 are related to issues concerning code injections that are grouped under the Common Weakness Enumeration (CWE) Base CWE-94.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-21
Last Modified
2026-11-07
Generated
2026-11-10
AI Q&A
2026-10-22
EPSS Evaluated
2026-11-09
NVD
EUVD

Affected Vendors & Products

Showing 94 associated CPEs
Vendor Product Version / Range
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X8.11.2
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X8.6
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X8.11.3
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X8.2.2
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X8.8.3
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X8.11.0
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X12.5.2
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X8.1.1
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X8.9
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X12.5.1
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X12.5.6
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X8.7.3
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X12.6.0
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X8.11.1
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X8.5
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X8.9.1
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X8.10.2
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X8.8.2
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.3
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X8.1
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X8.9.2
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X8.11.4
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X12.5.4
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X8.8.1
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X8.2.1
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.1
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X8.6.1
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X8.1.2
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X8.8
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X8.10.0
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X12.5.3
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X8.10.1
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X12.5.7
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X8.10.3
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X8.7.1
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X8.2
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X12.5.8
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X8.7
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.2
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X12.5.9
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X12.5.0
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X8.10.4
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X8.7.2
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X12.5.5
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X12.6.1
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X12.6.2
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X12.6.3
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X12.6.4
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X12.7.0
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X12.7.1
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X14.0.0
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X14.0.1
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X14.0.2
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X14.0.3
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X14.0.4
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X14.0.5
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X14.0.6
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X14.0.7
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X14.0.8
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X14.2.0
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X14.0.9
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X14.2.1
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X14.2.2
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X14.0.11
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X14.2.5
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X14.0.10
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X14.2.6
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X14.2.7
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X14.3.0
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X14.3.1
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X14.3.2
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X14.3.3
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X15.0.0
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X14.3.4
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X14.3.5
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X15.0.1
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X15.0.2
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X15.0.3
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X14.3.6
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X15.2.0
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X15.2.1
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X15.2.2
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X15.2.3
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X14.3.7
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X15.2.4.
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X15.2.4
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X15.3.0
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X15.3.1
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X15.3.2
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X15.4.0
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X15.5.0
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X15.5.1
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X15.5.2
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X15.5.3

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-94 The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-76494 is a code injection vulnerability affecting Cisco Expressway Series software. It falls under CWE-94, which involves improper control of generation of code that can lead to injection flaws. The issue was discovered during Cisco's internal security review and addressed in software hardening releases.

Impact Analysis

This vulnerability could allow an attacker to execute arbitrary code on the affected system. This may lead to unauthorized access, data breaches, or disruption of services. The impact includes high confidentiality, integrity, and availability risks as indicated by the CVSS score of 7.8.

Mitigation Strategies

Apply the latest security patches from Cisco for the Cisco Expressway Series to address code injection vulnerabilities. Monitor Cisco's security advisories for updates and restrict network access to affected systems until patched.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-76494. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...