CVE-2026-76466
Cisco Cisco TelePresence Video Communication Server (VCS) Expressway
- Cisco Cisco TelePresence Video Communication Server (VCS) Expressway
- Critical
- CVSS 9.8
- EPSS 0.38%
- No fixed version listed here
What to do
No fixed version listed here
Affected products
| Product | Affected | Fixed in |
|---|---|---|
| Cisco Cisco TelePresence Video Communication Server (VCS) Expressway | X8.11.2; X8.6; X8.11.3; X8.2.2; X8.8.3; X8.11.0; X12.5.2; X8.1.1; X8.9; X12.5.1; X12.5.6; X8.7.3; X12.6.0; X8.11.1; X8.5; X8.9.1; X8.10.2; X8.8.2; X8.5.3; X8.1; X8.9.2; X8.11.4; X12.5.4; X8.8.1; X8.2.1; X8.5.1; X8.6.1; X8.1.2; X8.8; X8.10.0 | Only in the CVE record |
The CVE record lists 64 ranges this page cannot state exactly.
Scores and signals
- Exploitation
- No known exploitation
- Severity
- Critical, CVSS 9.8 (v3.1, scored by cisco)
- EPSS
- 0.38% chance of exploitation in the next 30 days (EPSS from FIRST, as of Oct 23, 2026)
- CISA's SSVC decision points
- Exploitation: none. Automatable: yes. Technical impact: total. As of Oct 21, 2026.
- Weakness
- CWE-798: Use of Hard-coded Credentials
- Vendor
- Cisco, Cisco TelePresence Video Communication Server (VCS) Expressway
Timeline
- First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.