As cited
Copy frozen at (site build).
vulnerabilities
NCSC-2026-0451 Vulnerabilities fixed in Cisco Expressway Series
Cisco released patches for multiple vulnerabilities in Expressway Series, including insufficient authorization checks in Mobile and Remote Access provisioning that allow unauthenticated attackers to access sensitive information, and a database service flaw enabling remote code execution as root via inadequate client certificate validation. Additional vulnerabilities spanning improper resource control, authentication, input validation, SQL injection, access control, and temporary file handling were discovered through internal security reviews and addressed via software hardening updates.
Why it matters: Organizations deploying Cisco Expressway Series must apply patches immediately to prevent unauthorized access to sensitive data and remote code execution by both unauthenticated external and network-adjacent attackers.
- Source published
- First seen by Cybersecurity Tracker