CVE-2026-76435: Exposure of Sensitive System Information to an Unauthorized Control Sphere in Cisco Cisco TelePresence Video Communication Server (VCS) Expressway

The vulnerability in Cisco Expressway Series arises from insufficient authorization validation of HTTP requests during Mobile and Remote Access provisioning. An unauthenticated remote attacker can exploit this by sending a specially crafted URL request to the device, thereby accessing sensitive system information without proper authorization. This affects Cisco Expressway Core (Expressway-C) and Cisco Expressway Edge (Expressway-E) devices. The CVSS 3.1 base score is 5.3, reflecting a medium severity with network attack vector, low complexity, no privileges required, no user interaction, and confidentiality impact only.

An attacker can remotely and without authentication obtain sensitive information from the affected Cisco Expressway devices. The confidentiality of the system is impacted, but integrity and availability are not affected. This could lead to information disclosure that might aid further attacks or reconnaissance.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or workaround information is provided in the available data. Until a patch is available, restrict network access to the affected devices and monitor for suspicious HTTP requests targeting Mobile and Remote Access provisioning endpoints.