Is CVE-2026-76496 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-76496 being exploited in the wild.

How severe is CVE-2026-76496?

High severity, with a CVSS score of 7, published 21 October 2026.

Which products and versions are affected?

Cisco Expressway-C X14 and earlier, X15.5.3 and earlier; Cisco Expressway-E X14 and earlier, X15.5.3 and earlier.

Is there a fix for CVE-2026-76496?

Yes: fixed in Expressway-C and Expressway-E: X15.5.20; migrate X14 and earlier to a fixed release. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-76496 attacked?

It is attacked over the network, in a network appliance.

Am I affected by CVE-2026-76496?

Check whether you run Cisco Expressway-C or Cisco Expressway-E at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-76496: Cisco Expressway Series improper link resolution

CVE-2026-76496 · Severity: high · CVSS 7 · Published 2026-10-21

Cisco Expressway Core and Edge devices, which handle video communications and network connectivity for enterprises, contain a flaw in how they resolve file paths and links. An attacker on the network could exploit this to bypass security controls, potentially accessing sensitive data or disrupting communication services without authentication.

Technologies: Cisco Expressway-C, Cisco Expressway-E. Vendors: Cisco.

Quick answers

Is CVE-2026-76496 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-76496 being exploited in the wild.
How severe is CVE-2026-76496?: High severity, with a CVSS score of 7, published 21 October 2026.
Which products and versions are affected?: Cisco Expressway-C X14 and earlier, X15.5.3 and earlier; Cisco Expressway-E X14 and earlier, X15.5.3 and earlier.
Is there a fix for CVE-2026-76496?: Yes: fixed in Expressway-C and Expressway-E: X15.5.20; migrate X14 and earlier to a fixed release. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-76496 attacked?: It is attacked over the network, in a network appliance.
Am I affected by CVE-2026-76496?: Check whether you run Cisco Expressway-C or Cisco Expressway-E at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

Fixed in: Expressway-C and Expressway-E: X15.5.20; migrate X14 and earlier to a fixed release

Technical details

CVE-2026-76496 addresses improper link resolution (CWE-59) in Cisco Expressway Series software. The vulnerability is reachable over the network without authentication (CVSS vector indicates AV:N/AC:L/PR:N/UI:N) and can lead to integrity or availability compromise. This is part of a hardening release addressing multiple internally discovered weaknesses.

Affected products

Cisco Expressway-C X14 and earlier, X15.5.3 and earlier
Cisco Expressway-E X14 and earlier, X15.5.3 and earlier

Timeline

2026-10-21: disclosed

References

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-exwy-hardening-FhcqBVcs

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.