CVE-2026-76438 is a medium severity vulnerability in the web-based management interface of Cisco BroadWorks CommPilot Application Software. It allows an authenticated remote attacker with low privileges to alter device configurations due to missing authorization checks. Exploitation requires sending a crafted HTTP request. No patch or remediation details are currently provided.