CISCO Security Advisory
Published Date: Not specified
CVE: CVE-2026-76490
Advisory Summary
◆ Cisco Expressway Series Security Hardening Release (Oct 2026)
Cisco has published a software hardening update for Cisco Expressway Series covering Expressway-C (Core) and Expressway-E (Edge) devices. The update is based on an internal security review and addresses multiple internally discovered vulnerabilities, with an overall Security Impact Rating: High.
- Applies to Cisco Expressway-C and Cisco Expressway-E
- No known active exploitation at the time of disclosure (per Cisco)
- Cisco groups issues by CWE (Common Weakness Enumeration) and provides one CVE grouping identifier per CWE class to streamline patching/disclosure
- High impact posture change for a system commonly exposed at the network perimeter (Expressway Edge) and involved in enterprise real-time communications routing (Core/Edge roles).
- With no workarounds, the only practical risk reduction is upgrading to the fixed software release.
- CVE-2026-76490
- CVE-2026-76491
- CVE-2026-76492
- CVE-2026-76493
- CVE-2026-76494
- CVE-2026-76495
- CVE-2026-76496
- CVE-2026-76497
🔧 Actionable recommendations (market/ops ready)
1. Inventory all Expressway-C / Expressway-E deployments and current versions.
2. Plan immediate patching to the release referenced in Cisco’s advisory (given High rating and no workarounds).
3. Validate that maintenance windows align with call-routing/communications availability requirements.
4. Monitor Cisco for follow-on advisories that may provide deeper per-issue details for each vulnerability class.
🔎
-2026
Reference: Vendor Advisory