CVE-2026-76463
HighCVSS 8.8Summary
A vulnerability found during Cisco's internal security review concerns improper access control (CWE-284). It is addressed in a software hardening release.
Risk Assessment
Inadequate access control may allow unauthorized users to gain privileges or access resources they should not have, increasing the risk of data confidentiality and integrity breaches.
Recommendation
Apply fixes from the latest Cisco hardening release. Review access control configurations and consider the principle of least privilege.
Other vulnerabilities in Cisco
See all- CVE-2026-76469High
A vulnerability discovered during Cisco's internal security review concerns insufficient control flow management (CWE-691). It is addressed in a software hardening release. Impact details are not provided in the description.
- CVE-2026-76468High
A vulnerability found during Cisco's internal security review concerns improper input validation (CWE-20). It is addressed in a software hardening release. No impact details are given.
- CVE-2026-76467High
A vulnerability discovered by Cisco's security review concerns improper control of a resource through its lifetime (CWE-664). It is fixed in a software hardening release.
Original NVD description (English source)
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76463 are related to improper access control issues that are grouped under the Common Weakness Enumeration (CWE) CWE-284.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS