CVE-2026-76495
Awaiting Analysis Awaiting Analysis - Queue

Incorrect Permission Assignment in Cisco Expressway Series

Vulnerability report for CVE-2026-76495, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-10-21

Last updated on: 2026-11-07

Assigner: Cisco Systems, Inc.

Description

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.   The vulnerabilities tracked by CVE-2026-76495 are related to issues concerning incorrect permission assignments that are grouped under the Common Weakness Enumeration (CWE) Variant CWE-732.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-21
Last Modified
2026-11-07
Generated
2026-11-10
AI Q&A
2026-10-22
EPSS Evaluated
2026-11-09
NVD
EUVD

Affected Vendors & Products

Showing 94 associated CPEs
Vendor Product Version / Range
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X8.11.2
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X8.6
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X8.11.3
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X8.2.2
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X8.8.3
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X8.11.0
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X12.5.2
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X8.1.1
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X8.9
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X12.5.1
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X12.5.6
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X8.7.3
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X12.6.0
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X8.11.1
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X8.5
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X8.9.1
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X8.10.2
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X8.8.2
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.3
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X8.1
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X8.9.2
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X8.11.4
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X12.5.4
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X8.8.1
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X8.2.1
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.1
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X8.6.1
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X8.1.2
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X8.8
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X8.10.0
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X12.5.3
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X8.10.1
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X12.5.7
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X8.10.3
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X8.7.1
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X8.2
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X12.5.8
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X8.7
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.2
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X12.5.9
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X12.5.0
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X8.10.4
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X8.7.2
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X12.5.5
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X12.6.1
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X12.6.2
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X12.6.3
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X12.6.4
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X12.7.0
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X12.7.1
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X14.0.0
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X14.0.1
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X14.0.2
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X14.0.3
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X14.0.4
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X14.0.5
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X14.0.6
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X14.0.7
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X14.0.8
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X14.2.0
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X14.0.9
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X14.2.1
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X14.2.2
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X14.0.11
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X14.2.5
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X14.0.10
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X14.2.6
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X14.2.7
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X14.3.0
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X14.3.1
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X14.3.2
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X14.3.3
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X15.0.0
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X14.3.4
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X14.3.5
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X15.0.1
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X15.0.2
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X15.0.3
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X14.3.6
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X15.2.0
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X15.2.1
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X15.2.2
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X15.2.3
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X14.3.7
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X15.2.4.
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X15.2.4
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X15.3.0
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X15.3.1
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X15.3.2
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X15.4.0
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X15.5.0
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X15.5.1
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X15.5.2
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway X15.5.3

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-732 The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-76495 is a vulnerability in Cisco Expressway Series software related to incorrect permission assignments, classified under CWE-732. It was discovered during Cisco's internal security review and addressed in a software hardening release. The vulnerability has a CVSS v3.1 base score of 7.8, indicating high severity.

Impact Analysis

This vulnerability could allow unauthorized users to gain elevated access or perform actions beyond their intended permissions due to incorrect permission assignments. This may lead to data breaches, unauthorized system changes, or other malicious activities depending on the affected system's configuration.

Mitigation Strategies

Upgrade to the fixed software release provided by Cisco for the Expressway Series to address incorrect permission assignments. Cisco has released updates specifically for this vulnerability.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-76495. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...