{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/expressway-core/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[{"id":"CVE-2026-76490"},{"id":"CVE-2026-76491"},{"id":"CVE-2026-76492"},{"id":"CVE-2026-76493"},{"id":"CVE-2026-76494"},{"id":"CVE-2026-76495"},{"id":"CVE-2026-76496"},{"id":"CVE-2026-76497"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Expressway Core","Expressway Edge"],"_cs_severities":["high"],"_cs_tags":["patch-management","security-hardening","product-news"],"_cs_type":"threat","_cs_vendors":["Cisco"],"content_html":"\u003cp\u003eCisco has released a security hardening update for the Cisco Expressway Series, including both Expressway Core and Expressway Edge devices. This update addresses eight vulnerabilities discovered during an internal security review. Cisco notes that these vulnerabilities were discovered internally, are not known to be actively exploited, and have no available workarounds. Cisco has grouped these vulnerabilities by their underlying Common Weakness Enumeration (CWE) class, assigning each group a unique CVE identifier. Further details regarding individual vulnerabilities may be provided in subsequent separate security advisories.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eCisco has assigned a High severity rating to the vulnerabilities addressed in this release. There is no evidence of active exploitation at this time.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInventory all Cisco Expressway Core and Expressway Edge deployments to ensure visibility.\u003c/li\u003e\n\u003cli\u003eApply the latest software hardening update provided by Cisco to all affected instances immediately, as no workarounds are available.\u003c/li\u003e\n\u003cli\u003eMonitor the Cisco Security Intelligence website for future granular advisories regarding these specific CVEs (CVE-2026-76490, CVE-2026-76491, CVE-2026-76492, CVE-2026-76493, CVE-2026-76494, CVE-2026-76495, CVE-2026-76496, CVE-2026-76497).\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-21T17:08:11Z","date_published":"2026-10-21T17:08:11Z","id":"https://feed.craftedsignal.io/briefs/2026-10-cisco-expressway-hardening/","summary":"Cisco has released a software hardening update to address eight vulnerabilities (CVE-2026-76490 through CVE-2026-76497) identified during an internal security review of the Expressway Core and Edge series.","title":"Cisco Expressway Series security hardening update","url":"https://feed.craftedsignal.io/briefs/2026-10-cisco-expressway-hardening/"}],"language":"en","title":"CraftedSignal Threat Feed - Expressway Core","version":"https://jsonfeed.org/version/1.1"}