cisco telepresence-video-communication-server CVE-2026-76491 is a vulnerability in Cisco Telepresence Video Communication Server
Published on October 21, 2026

Cisco Expressway Series Software Hardening Release: October 2026 - Denial of Service Vulnerabilities
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.   The vulnerabilities tracked by CVE-2026-76491 are related to issues concerning reachable assertions that are grouped under the Common Weakness Enumeration (CWE) Base CWE-617.

NVD

Vulnerability Analysis

CVE-2026-76491 can be exploited with network access, and does not require authorization privileges or user interaction. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality and integrity, and a high impact on availability.

Attack Vector:
NETWORK
Attack Complexity:
LOW
Privileges Required:
NONE
User Interaction:
NONE
Scope:
UNCHANGED
Confidentiality Impact:
NONE
Integrity Impact:
NONE
Availability Impact:
HIGH

Weakness Type

What is an assertion failure Vulnerability?

The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.

CVE-2026-76491 has been classified to as an assertion failure vulnerability or weakness.


Products Associated with CVE-2026-76491

Want to know whenever a new CVE is published for Cisco Telepresence Video Communication Server? stack.watch will email you.

 

Affected Versions

Cisco TelePresence Video Communication Server (VCS) Expressway: