{"api_version":"1","generated_at":"2026-10-21T23:53:04+00:00","cve":"CVE-2026-76495","urls":{"html":"https://cve.report/CVE-2026-76495","api":"https://cve.report/api/cve/CVE-2026-76495.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2026-76495","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-76495"},"summary":{"title":"Cisco Expressway Series Software Hardening Release: October 2026 - Incorrect Permission Assignment Vulnerabilities","description":"As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.  \r\n\r\nThe vulnerabilities tracked by CVE-2026-76495 are related to issues concerning incorrect permission assignments that are grouped under the Common Weakness Enumeration (CWE) Variant CWE-732.","state":"PUBLISHED","assigner":"cisco","published_at":"2026-10-21 17:19:09","updated_at":"2026-10-21 18:54:37"},"problem_types":["CWE-732","CWE-732 Incorrect Permission Assignment for Critical Resource"],"metrics":[{"version":"3.1","source":"psirt@cisco.com","type":"Primary","score":"7.8","severity":"HIGH","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","data":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"}},{"version":"3.1","source":"CNA","type":"CVSSV3_1","score":"7.8","severity":"HIGH","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","data":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"}}],"references":[{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-exwy-hardening-FhcqBVcs","name":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-exwy-hardening-FhcqBVcs","refsource":"psirt@cisco.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-76495","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-76495","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X8.11.2","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X8.6","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X8.11.3","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X8.2.2","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X8.8.3","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X8.11.0","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X12.5.2","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X8.1.1","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X8.9","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X12.5.1","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X12.5.6","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X8.7.3","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X12.6.0","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X8.11.1","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X8.5","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X8.9.1","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X8.10.2","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X8.8.2","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X8.5.3","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X8.1","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X8.9.2","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X8.11.4","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X12.5.4","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X8.8.1","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X8.2.1","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X8.5.1","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X8.6.1","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X8.1.2","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X8.8","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X8.10.0","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X12.5.3","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X8.10.1","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X12.5.7","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X8.10.3","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X8.7.1","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X8.2","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X12.5.8","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X8.7","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X8.5.2","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X12.5.9","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X12.5.0","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X8.10.4","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X8.7.2","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X12.5.5","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X12.6.1","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X12.6.2","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X12.6.3","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X12.6.4","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X12.7.0","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X12.7.1","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X14.0.0","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X14.0.1","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X14.0.2","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X14.0.3","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X14.0.4","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X14.0.5","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X14.0.6","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X14.0.7","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X14.0.8","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X14.2.0","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X14.0.9","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X14.2.1","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X14.2.2","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X14.0.11","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X14.2.5","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X14.0.10","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X14.2.6","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X14.2.7","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X14.3.0","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X14.3.1","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X14.3.2","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X14.3.3","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X15.0.0","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X14.3.4","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X14.3.5","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X15.0.1","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X15.0.2","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X15.0.3","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X14.3.6","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X15.2.0","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X15.2.1","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X15.2.2","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X15.2.3","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X14.3.7","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X15.2.4.","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X15.2.4","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X15.3.0","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X15.3.1","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X15.3.2","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X15.4.0","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X15.5.0","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X15.5.1","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X15.5.2","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","version":"affected X15.5.3","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[{"source":"CNA","title":"","value":"The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory.","time":"","lang":"en"}],"credits":[],"nvd_cpes":[],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"cna":{"affected":[{"defaultStatus":"unknown","product":"Cisco TelePresence Video Communication Server (VCS) Expressway","vendor":"Cisco","versions":[{"status":"affected","version":"X8.11.2"},{"status":"affected","version":"X8.6"},{"status":"affected","version":"X8.11.3"},{"status":"affected","version":"X8.2.2"},{"status":"affected","version":"X8.8.3"},{"status":"affected","version":"X8.11.0"},{"status":"affected","version":"X12.5.2"},{"status":"affected","version":"X8.1.1"},{"status":"affected","version":"X8.9"},{"status":"affected","version":"X12.5.1"},{"status":"affected","version":"X12.5.6"},{"status":"affected","version":"X8.7.3"},{"status":"affected","version":"X12.6.0"},{"status":"affected","version":"X8.11.1"},{"status":"affected","version":"X8.5"},{"status":"affected","version":"X8.9.1"},{"status":"affected","version":"X8.10.2"},{"status":"affected","version":"X8.8.2"},{"status":"affected","version":"X8.5.3"},{"status":"affected","version":"X8.1"},{"status":"affected","version":"X8.9.2"},{"status":"affected","version":"X8.11.4"},{"status":"affected","version":"X12.5.4"},{"status":"affected","version":"X8.8.1"},{"status":"affected","version":"X8.2.1"},{"status":"affected","version":"X8.5.1"},{"status":"affected","version":"X8.6.1"},{"status":"affected","version":"X8.1.2"},{"status":"affected","version":"X8.8"},{"status":"affected","version":"X8.10.0"},{"status":"affected","version":"X12.5.3"},{"status":"affected","version":"X8.10.1"},{"status":"affected","version":"X12.5.7"},{"status":"affected","version":"X8.10.3"},{"status":"affected","version":"X8.7.1"},{"status":"affected","version":"X8.2"},{"status":"affected","version":"X12.5.8"},{"status":"affected","version":"X8.7"},{"status":"affected","version":"X8.5.2"},{"status":"affected","version":"X12.5.9"},{"status":"affected","version":"X12.5.0"},{"status":"affected","version":"X8.10.4"},{"status":"affected","version":"X8.7.2"},{"status":"affected","version":"X12.5.5"},{"status":"affected","version":"X12.6.1"},{"status":"affected","version":"X12.6.2"},{"status":"affected","version":"X12.6.3"},{"status":"affected","version":"X12.6.4"},{"status":"affected","version":"X12.7.0"},{"status":"affected","version":"X12.7.1"},{"status":"affected","version":"X14.0.0"},{"status":"affected","version":"X14.0.1"},{"status":"affected","version":"X14.0.2"},{"status":"affected","version":"X14.0.3"},{"status":"affected","version":"X14.0.4"},{"status":"affected","version":"X14.0.5"},{"status":"affected","version":"X14.0.6"},{"status":"affected","version":"X14.0.7"},{"status":"affected","version":"X14.0.8"},{"status":"affected","version":"X14.2.0"},{"status":"affected","version":"X14.0.9"},{"status":"affected","version":"X14.2.1"},{"status":"affected","version":"X14.2.2"},{"status":"affected","version":"X14.0.11"},{"status":"affected","version":"X14.2.5"},{"status":"affected","version":"X14.0.10"},{"status":"affected","version":"X14.2.6"},{"status":"affected","version":"X14.2.7"},{"status":"affected","version":"X14.3.0"},{"status":"affected","version":"X14.3.1"},{"status":"affected","version":"X14.3.2"},{"status":"affected","version":"X14.3.3"},{"status":"affected","version":"X15.0.0"},{"status":"affected","version":"X14.3.4"},{"status":"affected","version":"X14.3.5"},{"status":"affected","version":"X15.0.1"},{"status":"affected","version":"X15.0.2"},{"status":"affected","version":"X15.0.3"},{"status":"affected","version":"X14.3.6"},{"status":"affected","version":"X15.2.0"},{"status":"affected","version":"X15.2.1"},{"status":"affected","version":"X15.2.2"},{"status":"affected","version":"X15.2.3"},{"status":"affected","version":"X14.3.7"},{"status":"affected","version":"X15.2.4."},{"status":"affected","version":"X15.2.4"},{"status":"affected","version":"X15.3.0"},{"status":"affected","version":"X15.3.1"},{"status":"affected","version":"X15.3.2"},{"status":"affected","version":"X15.4.0"},{"status":"affected","version":"X15.5.0"},{"status":"affected","version":"X15.5.1"},{"status":"affected","version":"X15.5.2"},{"status":"affected","version":"X15.5.3"}]}],"descriptions":[{"lang":"en","value":"As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.  \r\n\r\nThe vulnerabilities tracked by CVE-2026-76495 are related to issues concerning incorrect permission assignments that are grouped under the Common Weakness Enumeration (CWE) Variant CWE-732."}],"exploits":[{"lang":"en","value":"The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"format":"cvssV3_1"}],"problemTypes":[{"descriptions":[{"cweId":"CWE-732","description":"Incorrect Permission Assignment for Critical Resource","lang":"en","type":"cwe"}]}],"providerMetadata":{"dateUpdated":"2026-10-21T16:17:58.451Z","orgId":"d1c1063e-7a18-46af-9102-31f8928bc633","shortName":"cisco"},"references":[{"name":"cisco-sa-exwy-hardening-FhcqBVcs","url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-exwy-hardening-FhcqBVcs"}],"source":{"advisory":"cisco-sa-exwy-hardening-FhcqBVcs","defects":["CSCww67926"],"discovery":"INTERNAL"},"title":"Cisco Expressway Series Software Hardening Release: October 2026 - Incorrect Permission Assignment Vulnerabilities"}},"cveMetadata":{"assignerOrgId":"d1c1063e-7a18-46af-9102-31f8928bc633","assignerShortName":"cisco","cveId":"CVE-2026-76495","datePublished":"2026-10-21T16:17:58.451Z","dateReserved":"2026-08-19T12:02:03.640Z","dateUpdated":"2026-10-21T16:17:58.451Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"nvd":{"publishedDate":"2026-10-21 17:19:09","lastModifiedDate":"2026-10-21 18:54:37","problem_types":["CWE-732","CWE-732 Incorrect Permission Assignment for Critical Resource"],"metrics":{"cvssMetricV31":[{"source":"psirt@cisco.com","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}]},"configurations":[]},"legacy_mitre":{"record":{"CveYear":"2026","CveId":"76495","Ordinal":"1","Title":"Cisco Expressway Series Software Hardening Release: October 2026","CVE":"CVE-2026-76495","Year":"2026"},"notes":[{"CveYear":"2026","CveId":"76495","Ordinal":"1","NoteData":"As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.  \r\n\r\nThe vulnerabilities tracked by CVE-2026-76495 are related to issues concerning incorrect permission assignments that are grouped under the Common Weakness Enumeration (CWE) Variant CWE-732.","Type":"Description","Title":"Cisco Expressway Series Software Hardening Release: October 2026"}]}}}