CVE-2026-76495
Awaiting Analysis
Awaiting Analysis - Queue
Incorrect Permission Assignment in Cisco Expressway Series
Vulnerability report for CVE-2026-76495, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.
Publication date: 2026-10-21
Last updated on: 2026-10-21
Assigner: Cisco Systems, Inc.
Description
Description
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.
The vulnerabilities tracked by CVE-2026-76495 are related to issues concerning incorrect permission assignments that are grouped under the Common Weakness Enumeration (CWE) Variant CWE-732.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X8.11.2 |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X8.6 |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X8.11.3 |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X8.2.2 |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X8.8.3 |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X8.11.0 |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X12.5.2 |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X8.1.1 |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X8.9 |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X12.5.1 |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X12.5.6 |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X8.7.3 |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X12.6.0 |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X8.11.1 |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X8.5 |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X8.9.1 |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X8.10.2 |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X8.8.2 |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X8.5.3 |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X8.1 |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X8.9.2 |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X8.11.4 |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X12.5.4 |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X8.8.1 |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X8.2.1 |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X8.5.1 |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X8.6.1 |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X8.1.2 |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X8.8 |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X8.10.0 |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X12.5.3 |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X8.10.1 |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X12.5.7 |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X8.10.3 |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X8.7.1 |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X8.2 |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X12.5.8 |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X8.7 |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X8.5.2 |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X12.5.9 |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X12.5.0 |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X8.10.4 |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X8.7.2 |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X12.5.5 |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X12.6.1 |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X12.6.2 |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X12.6.3 |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X12.6.4 |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X12.7.0 |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X12.7.1 |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X14.0.0 |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X14.0.1 |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X14.0.2 |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X14.0.3 |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X14.0.4 |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X14.0.5 |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X14.0.6 |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X14.0.7 |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X14.0.8 |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X14.2.0 |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X14.0.9 |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X14.2.1 |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X14.2.2 |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X14.0.11 |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X14.2.5 |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X14.0.10 |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X14.2.6 |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X14.2.7 |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X14.3.0 |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X14.3.1 |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X14.3.2 |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X14.3.3 |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X15.0.0 |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X14.3.4 |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X14.3.5 |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X15.0.1 |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X15.0.2 |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X15.0.3 |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X14.3.6 |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X15.2.0 |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X15.2.1 |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X15.2.2 |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X15.2.3 |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X14.3.7 |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X15.2.4. |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X15.2.4 |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X15.3.0 |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X15.3.1 |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X15.3.2 |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X15.4.0 |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X15.5.0 |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X15.5.1 |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X15.5.2 |
| Cisco | Cisco | TelePresence Video Communication Server (VCS) Expressway X15.5.3 |
Helpful Resources
Exploitability
CWE
KEV
| CWE ID | Description |
|---|---|
| CWE-732 | The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors. |
