CVE-2026-76494
Last modified
CVE-2026-76494 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. EPSS estimates a 0.15% chance of exploitation in the next 30 days.
Description
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76494 are related to issues concerning code injections that are grouped under the Common Weakness Enumeration (CWE) Base CWE-94.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Cisco TelePresence Video Communication Server (VCS) Expressway | X8.11.2; X8.6; X8.11.3; X8.2.2; X8.8.3; X8.11.0; X12.5.2; X8.1.1; X8.9; X12.5.1; X12.5.6; X8.7.3; X12.6.0; X8.11.1; X8.5; X8.9.1; X8.10.2; X8.8.2; X8.5.3; X8.1; X8.9.2; X8.11.4; X12.5.4; X8.8.1; X8.2.1; X8.5.1; X8.6.1; X8.1.2; X8.8; X8.10.0; X12.5.3; X8.10.1; X12.5.7; X8.10.3; X8.7.1; X8.2; X12.5.8; X8.7; X8.5.2; X12.5.9; X12.5.0; X8.10.4; X8.7.2; X12.5.5; X12.6.1; X12.6.2; X12.6.3; X12.6.4; X12.7.0; X12.7.1; X14.0.0; X14.0.1; X14.0.2; X14.0.3; X14.0.4; X14.0.5; X14.0.6; X14.0.7; X14.0.8; X14.2.0; X14.0.9; X14.2.1; X14.2.2; X14.0.11; X14.2.5; X14.0.10; X14.2.6; X14.2.7; X14.3.0; X14.3.1; X14.3.2; X14.3.3; X15.0.0; X14.3.4; X14.3.5; X15.0.1; X15.0.2; X15.0.3; X14.3.6; X15.2.0; X15.2.1; X15.2.2; X15.2.3; X14.3.7; X15.2.4.; X15.2.4; X15.3.0; X15.3.1; X15.3.2; X15.4.0; X15.5.0; X15.5.1; X15.5.2; X15.5.3 |
References
Timeline
- Published
- Last Modified
- Status
- Awaiting Analysis
Frequently Asked Questions
What is CVE-2026-76494?
How severe is CVE-2026-76494?
How do I fix CVE-2026-76494?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-76489Multiple Cisco products are affected by a vulnerability in t…5.8
- CVE-2026-7649The ARMember – Membership Plugin, Content Restriction, Membe…7.5
- CVE-2026-76490As part of Cisco's ongoing commitment to proactive security …8.6
- CVE-2026-76491As part of Cisco's ongoing commitment to proactive security …7.5
- CVE-2026-76492As part of Cisco's ongoing commitment to proactive security …7.5
- CVE-2026-76493As part of Cisco's ongoing commitment to proactive security …7.5
- CVE-2026-76495As part of Cisco's ongoing commitment to proactive security …7.8
- CVE-2026-76496As part of Cisco's ongoing commitment to proactive security …7
- CVE-2026-76497As part of Cisco's ongoing commitment to proactive security …6.6
- CVE-2026-76498As part of Cisco's ongoing commitment to proactive security …9.8
- CVE-2026-76499As part of Cisco's ongoing commitment to proactive security …9.8
- CVE-2026-7650The E2Pdf – Export Pdf Tool for WordPress plugin for WordPre…6.4
Are you affected by CVE-2026-76494?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST