Cisco TelePresence Video Communication Server (VCS) Expressway: CVE-2026-76435: Cisco Expressway Series Information Disclosure Vulnerability

A vulnerability in Cisco Expressway Series could allow an unauthenticated, remote attacker to obtain sensitive information from an affected device. This vulnerability is due to insufficient authorization checks of HTTP requests during Mobile and Remote Access MRA provisioning. An attacker could...

PT-2026-120692

Name of the Vulnerable Software and Affected Versions Cisco Expressway Series versions prior to X15.5.20 Description An unauthenticated remote attacker with network access to Cisco Expressway Core Expressway-C or Cisco Expressway Edge Expressway-E devices can execute arbitrary operating system...

CVE-2022-20814

A vulnerability in the certificate validation of Cisco Expressway-C and Cisco TelePresence VCS could allow an unauthenticated, remote attacker to gain unauthorized access to sensitive data. The vulnerability is due to a lack of validation of the SSL server certificate that an affected device...

Expressway-E Impersonation

The vulnerability of the Expressway-E server in Cisco Expressway Series and Cisco Telepresence VCS conference communication devices is related to improper authentication. Exploiting this vulnerability allows a malicious actor to impersonate another user within the compromised system...

CVE-2024-20497

Cisco Expressway Edge (Expressway-E) is affected by an improper authorization vulnerability. An authenticated MRA user can masquerade as another user and potentially intercept calls or spoof caller IDs due to inadequate authorization checks for Mobile and Remote Access users. Exploitation require...

CVE-2024-20497: Improper Authorization

A vulnerability in Cisco Expressway Edge Expressway-E could allow an authenticated, remote attacker to masquerade as another user on an affected system. This vulnerability is due to inadequate authorization checks for Mobile and Remote Access MRA users. An attacker could exploit this vulnerabilit...