CWE-476 Null Pointer in Cisco Expressway
CVE-2026-76492 Published on October 21, 2026
Cisco Expressway Series Software Hardening Release: October 2026 - NULL Pointer Vulnerabilities
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.
The vulnerabilities tracked by CVE-2026-76492 are related to issues concerning null pointers that are grouped under the Common Weakness Enumeration (CWE) Base CWE-476.
Vulnerability Analysis
CVE-2026-76492 is exploitable with network access, and does not require authorization privileges or user interaction. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality and integrity, and a high impact on availability.
Weakness Type
NULL Pointer Dereference
A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit. NULL pointer dereference issues can occur through a number of flaws, including race conditions, and simple programming omissions.
Products Associated with CVE-2026-76492
Want to know whenever a new CVE is published for Cisco Telepresence Video Communication Server? stack.watch will email you.
Affected Versions
Cisco TelePresence Video Communication Server (VCS) Expressway:- Version X8.11.2 is affected.
- Version X8.6 is affected.
- Version X8.11.3 is affected.
- Version X8.2.2 is affected.
- Version X8.8.3 is affected.
- Version X8.11.0 is affected.
- Version X12.5.2 is affected.
- Version X8.1.1 is affected.
- Version X8.9 is affected.
- Version X12.5.1 is affected.
- Version X12.5.6 is affected.
- Version X8.7.3 is affected.
- Version X12.6.0 is affected.
- Version X8.11.1 is affected.
- Version X8.5 is affected.
- Version X8.9.1 is affected.
- Version X8.10.2 is affected.
- Version X8.8.2 is affected.
- Version X8.5.3 is affected.
- Version X8.1 is affected.
- Version X8.9.2 is affected.
- Version X8.11.4 is affected.
- Version X12.5.4 is affected.
- Version X8.8.1 is affected.
- Version X8.2.1 is affected.
- Version X8.5.1 is affected.
- Version X8.6.1 is affected.
- Version X8.1.2 is affected.
- Version X8.8 is affected.
- Version X8.10.0 is affected.
- Version X12.5.3 is affected.
- Version X8.10.1 is affected.
- Version X12.5.7 is affected.
- Version X8.10.3 is affected.
- Version X8.7.1 is affected.
- Version X8.2 is affected.
- Version X12.5.8 is affected.
- Version X8.7 is affected.
- Version X8.5.2 is affected.
- Version X12.5.9 is affected.
- Version X12.5.0 is affected.
- Version X8.10.4 is affected.
- Version X8.7.2 is affected.
- Version X12.5.5 is affected.
- Version X12.6.1 is affected.
- Version X12.6.2 is affected.
- Version X12.6.3 is affected.
- Version X12.6.4 is affected.
- Version X12.7.0 is affected.
- Version X12.7.1 is affected.
- Version X14.0.0 is affected.
- Version X14.0.1 is affected.
- Version X14.0.2 is affected.
- Version X14.0.3 is affected.
- Version X14.0.4 is affected.
- Version X14.0.5 is affected.
- Version X14.0.6 is affected.
- Version X14.0.7 is affected.
- Version X14.0.8 is affected.
- Version X14.2.0 is affected.
- Version X14.0.9 is affected.
- Version X14.2.1 is affected.
- Version X14.2.2 is affected.
- Version X14.0.11 is affected.
- Version X14.2.5 is affected.
- Version X14.0.10 is affected.
- Version X14.2.6 is affected.
- Version X14.2.7 is affected.
- Version X14.3.0 is affected.
- Version X14.3.1 is affected.
- Version X14.3.2 is affected.
- Version X14.3.3 is affected.
- Version X15.0.0 is affected.
- Version X14.3.4 is affected.
- Version X14.3.5 is affected.
- Version X15.0.1 is affected.
- Version X15.0.2 is affected.
- Version X15.0.3 is affected.
- Version X14.3.6 is affected.
- Version X15.2.0 is affected.
- Version X15.2.1 is affected.
- Version X15.2.2 is affected.
- Version X15.2.3 is affected.
- Version X14.3.7 is affected.
- Version X15.2.4. is affected.
- Version X15.2.4 is affected.
- Version X15.3.0 is affected.
- Version X15.3.1 is affected.
- Version X15.3.2 is affected.
- Version X15.4.0 is affected.
- Version X15.5.0 is affected.
- Version X15.5.1 is affected.
- Version X15.5.2 is affected.
- Version X15.5.3 is affected.
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.