5.3

CVE-2026-76435: cisco cisco telepresence video communication server (vcs) expressway

CVSS: 5.3v3.1MediumAwaiting analysis
Published 21-10-2026Last modified 21-10-2026
Open JSON

Vulnerability summary

CVE-2026-76435 is a medium (CVSS 5.3) vulnerability in cisco cisco telepresence video communication server (vcs) expressway.

Overall risk
21/100
0100
Low · default modelHow is this calculated?
CVSS score
5.3/10
010
Medium · v3.1 (CVE.org)
EPSS score
Not scored
0%100%
No EPSS score yet
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Timeline

  1. 21-10-2026
    PublishedVulnerability first disclosed.

Description

A vulnerability in Cisco Expressway Series could allow an unauthenticated, remote attacker to obtain sensitive information from an affected device. This vulnerability is due to insufficient authorization checks of HTTP requests during Mobile and Remote Access (MRA) provisioning. An attacker could exploit this vulnerability by submitting a crafted URL request to an affected device. A successful exploit could allow the attacker to access sensitive information that they would otherwise not have authorization to access. Note: Cisco Expressway Series refers to Cisco Expressway Core (Expressway-C) devices and Cisco Expressway Edge (Expressway-E) devices.

CVSS metrics

2 scores · 2 sources · 1 version

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Cisco1 product
  • cisco telepresence video communication server (vcs) expresswayX8.11.2 | X8.6 | X8.11.3 | X8.2.2 | X8.8.3 | X8.11.0 | X12.5.2 | X8.1.1 | X8.9 | X12.5.1 | X12.5.6 | X8.7.3 | X12.6.0 | X8.11.1 | X8.5 | X8.9.1 | X8.10.2 | X8.8.2 | X8.5.3 | X8.1 | X8.9.2 | X8.11.4 | X12.5.4 | X8.8.1 | X8.2.1 | X8.5.1 | X8.6.1 | X8.1.2 | X8.8 | X8.10.0 | X12.5.3 | X8.10.1 | X12.5.7 | X8.10.3 | X8.7.1 | X8.2 | X12.5.8 | X8.7 | X8.5.2 | X12.5.9 | X12.5.0 | X8.10.4 | X8.7.2 | X12.5.5 | X12.6.1 | X12.6.2 | X12.6.3 | X12.6.4 | X12.7.0 | X12.7.1 | X14.0.0 | X14.0.1 | X14.0.2 | X14.0.3 | X14.0.4 | X14.0.5 | X14.0.6 | X14.0.7 | X14.0.8 | X14.2.0 | X14.0.9 | X14.2.1 | X14.2.2 | X14.0.11 | X14.2.5 | X14.0.10 | X14.2.6 | X14.2.7 | X14.3.0 | X14.3.1 | X14.3.2 | X14.3.3 | X15.0.0 | X14.3.4 | X14.3.5 | X15.0.1 | X15.0.2 | X15.0.3 | X14.3.6 | X15.2.0 | X15.2.1 | X15.2.2 | X15.2.3 | X14.3.7 | X15.2.4 | X15.3.0 | X15.3.1 | X15.3.2 | X15.4.0 | X15.5.0 | X15.5.1 | X15.5.2

1 vendor · 1 product

References

1 links