CVE-2026-76466 Cisco Expressway Series - Remote Code Execution

Cisco Expressway Series contains a remote code execution caused by use of persistent cookies and insufficient client certificate validation in database service, letting unauthenticated remote attackers execute arbitrary OS commands as root, exploit requires possession of persistent cookies.

CVSS base score 9.8 /10
Critical
CISA KEV
Not listed
Public exploit
None known
View the NVD record ↗

Details

Type
Remote Code Execution
Impact
Remote Code Execution
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Published
21 October 2026
Updated
22 October 2026
Weakness
CWE-798

Vendor fix

Update to the latest Cisco Expressway Series version with security patches.

Patching closes this CVE. It does not tell you which of your systems run the affected version, or what else is exposed alongside them.

References

← All CVEs