{"dataType":"CVE_RECORD","dataVersion":"5.0","cveMetadata":{"cveId":"GCVE-110-NCSC-2026-451","assignerOrgId":"","assignerShortName":"Vulnetix","state":"PUBLISHED","datePublished":"2026-10-22T12:09:18Z","dateUpdated":"","dateReserved":""},"containers":{"cna":{"providerMetadata":null,"title":"","descriptions":[{"lang":"nl","value":"A vulnerability in Cisco Expressway Series allows unauthenticated remote attackers to bypass authorization checks during Mobile and Remote Access provisioning, enabling them to access sensitive device information.","supportingMedia":null},{"lang":"nl","value":"A vulnerability in Cisco Expressway Series database service allows unauthenticated remote attackers with network access to execute arbitrary root commands due to persistent cookies and insufficient client certificate validation when TLS Verify Mode is enabled for clustering.","supportingMedia":null},{"lang":"nl","value":"Cisco's engineering teams performed an internal security review of multiple collaboration products, resulting in software hardening releases addressing vulnerabilities related to improper resource control, including CVE-2026-76473 and CWE-74.","supportingMedia":null},{"lang":"nl","value":"Cisco engineering teams conducted an internal security review of multiple collaboration products, releasing software updates to address several authentication-related vulnerabilities including CVE-2026-76474 (CWE-287).","supportingMedia":null},{"lang":"nl","value":"Cisco engineering teams performed an internal security review of multiple collaboration products, releasing software updates to address several vulnerabilities involving improper input neutralization during web page generation (CVE-2026-76475, CWE-79).","supportingMedia":null},{"lang":"nl","value":"Cisco engineering teams released software hardening updates for multiple collaboration products addressing several CWE-20 improper input validation vulnerabilities, including CVE-2026-76476.","supportingMedia":null},{"lang":"nl","value":"Cisco engineering teams identified and addressed multiple SQL injection vulnerabilities (CWE-89) in several collaboration products through internal security reviews and subsequent software updates.","supportingMedia":null},{"lang":"nl","value":"Cisco's engineering teams conducted a thorough internal security review of multiple collaboration and communication products, resulting in software hardening releases addressing several improper access control vulnerabilities, including CVE-2026-76478 (CWE-284).","supportingMedia":null},{"lang":"nl","value":"Cisco engineering teams conducted an internal security review of multiple collaboration products, releasing software updates to address several vulnerabilities including improper pathname limitation (CVE-2026-76479, CWE-22).","supportingMedia":null},{"lang":"nl","value":"Cisco engineering teams performed an internal security review of multiple collaboration products, releasing software updates that address several vulnerabilities related to improper handling of exceptional conditions, including CVE-2026-76481 (CWE-703).","supportingMedia":null},{"lang":"nl","value":"A vulnerability in Cisco Unified Communications Manager and its Session Management Edition allows an unauthenticated remote attacker to bypass access controls by sending crafted HTTP requests, potentially gaining unauthorized network access.","supportingMedia":null},{"lang":"nl","value":"Cisco's Expressway Series team conducted an internal security review resulting in software hardening releases that address multiple vulnerabilities, including out-of-bounds write issues (CVE-2026-76490, CWE-787).","supportingMedia":null},{"lang":"nl","value":"Cisco's Expressway Series team released a software hardening update addressing multiple internally discovered vulnerabilities, including CVE-2026-76491 related to reachable assertions under CWE-617.","supportingMedia":null},{"lang":"nl","value":"Cisco's Expressway Series software team released a hardening update addressing multiple internally discovered vulnerabilities, including null pointer issues tracked under CVE-2026-76492 and CWE-476.","supportingMedia":null},{"lang":"nl","value":"Cisco's Expressway Series team conducted an internal security review resulting in software hardening releases that address multiple vulnerabilities, including uncaught exceptions classified under CWE-248 and tracked by CVE-2026-76493.","supportingMedia":null},{"lang":"nl","value":"Cisco's Expressway Series team released software hardening updates addressing multiple internally discovered vulnerabilities, including code injection flaws classified under CWE-94 and tracked as CVE-2026-76494.","supportingMedia":null},{"lang":"nl","value":"Cisco's Expressway Series team conducted an internal security review resulting in software hardening releases that address multiple vulnerabilities, including incorrect permission assignments (CVE-2026-76495, CWE-732).","supportingMedia":null},{"lang":"nl","value":"Cisco's Expressway Series team conducted an internal security review resulting in software hardening releases that address multiple vulnerabilities related to improper link resolutions, including CVE-2026-76496 classified under CWE-59.","supportingMedia":null},{"lang":"nl","value":"Cisco's Expressway Series team conducted an internal security review resulting in software hardening releases that address multiple vulnerabilities, including insecure temporary file handling (CVE-2026-76497, CWE-377).","supportingMedia":null}],"references":[{"url":"https://advisories.ncsc.nl/csaf/v2/2026/ncsc-2026-0451.json","name":"","tags":["advisory"]},{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-access-PW9e8Jt2","name":"","tags":["advisory"]},{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-inf-disc-vvYqgSTS","name":"","tags":["advisory"]},{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-exwy-hardening-FhcqBVcs","name":"","tags":["advisory"]},{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-QGwHnJ6k","name":"","tags":["advisory"]},{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vcs-static-cred-hr7EWZ8t","name":"","tags":["advisory"]},{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-voice-hardening-twgbH9e3","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-76435.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-76466.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-76473.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-76474.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-76475.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-76476.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-76477.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-76478.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-76479.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-76481.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-76487.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-76490.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-76491.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-76492.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-76493.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-76494.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-76495.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-76496.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-76497.json","name":"","tags":["advisory"]}],"metrics":[{"format":"","scenarios":null,"cvssV2_0":null,"cvssV3_0":null,"cvssV3_1":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H","baseScore":6.6,"baseSeverity":"MEDIUM"},"cvssV4_0":null,"other":null}],"problemTypes":[{"descriptions":[{"lang":"en","description":"Exposure of Sensitive System Information to an Unauthorized Control Sphere","cweId":"CWE-497","type":"CWE"}]},{"descriptions":[{"lang":"en","description":"Use of Hard-coded Credentials","cweId":"CWE-798","type":"CWE"}]},{"descriptions":[{"lang":"en","description":"Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')","cweId":"CWE-22","type":"CWE"}]},{"descriptions":[{"lang":"en","description":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","cweId":"CWE-79","type":"CWE"}]},{"descriptions":[{"lang":"en","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')","cweId":"CWE-89","type":"CWE"}]},{"descriptions":[{"lang":"en","description":"Exposed Dangerous Method or Function","cweId":"CWE-749","type":"CWE"}]},{"descriptions":[{"lang":"en","description":"Out-of-bounds Write","cweId":"CWE-787","type":"CWE"}]},{"descriptions":[{"lang":"en","description":"Reachable Assertion","cweId":"CWE-617","type":"CWE"}]},{"descriptions":[{"lang":"en","description":"NULL Pointer Dereference","cweId":"CWE-476","type":"CWE"}]},{"descriptions":[{"lang":"en","description":"Uncaught Exception","cweId":"CWE-248","type":"CWE"}]},{"descriptions":[{"lang":"en","description":"Improper Control of Generation of Code ('Code Injection')","cweId":"CWE-94","type":"CWE"}]},{"descriptions":[{"lang":"en","description":"Incorrect Permission Assignment for Critical Resource","cweId":"CWE-732","type":"CWE"}]},{"descriptions":[{"lang":"en","description":"Improper Link Resolution Before File Access ('Link Following')","cweId":"CWE-59","type":"CWE"}]},{"descriptions":[{"lang":"en","description":"Insecure Temporary File","cweId":"CWE-377","type":"CWE"}]}],"affected":[{"vendor":"Cisco","product":"vers:unknown/*","collectionURL":"","packageName":"","repo":"","defaultStatus":"","versions":null,"cpes":null,"modules":null,"programFiles":null,"platforms":null}],"cpeApplicability":null,"rejectedReasons":null,"replacedBy":null,"x_vulnetix_aliases":{"direct":["CVE-2026-76435","CVE-2026-76466","CVE-2026-76473","CVE-2026-76474","CVE-2026-76475","CVE-2026-76476","CVE-2026-76477","CVE-2026-76478","CVE-2026-76479","CVE-2026-76481","CVE-2026-76487","CVE-2026-76490","CVE-2026-76491","CVE-2026-76492","CVE-2026-76493","CVE-2026-76494","CVE-2026-76495","CVE-2026-76496","CVE-2026-76497"]}},"adp":null}}