CVE-2026-76463

HIGH

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted i...

Affects 0 products across 1 vendor.

CVSS 3.18.8
EPSS0.1%
Percentile3th
PatchUnknown
CVSS Vector — Plain English Exploitable from adjacent network, low complexity, no authentication required, no user interaction needed, can impact systems beyond the vulnerable component, full confidentiality impact.
CWE Weakness Definitions
CWE-284: Improper Access Control

Software does not restrict or incorrectly restricts access to a resource.

Related Attack Patterns (CAPEC)
CAPEC-478 Modification of Windows Service Configuration
via CWE-284
CAPEC-479 Malicious Root Certificate
via CWE-284
CAPEC-546 Incomplete Data Deletion in a Multi-Tenant Environment
via CWE-284
CAPEC-550 Install New Service
via CWE-284
CAPEC-551 Modify Existing Service
via CWE-284
Show all 17

Mapping is CWE-to-CAPEC per MITRE CAPEC 3.9.

◆ AI Analysis — automated analysis, not human-reviewed

A high severity vulnerability (CVE-2026-76463) affects the target system. As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multipl...

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2026-76463?
A high severity vulnerability (CVE-2026-76463) affects the target system. As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multipl...
What is the CVSS score for CVE-2026-76463?
CVE-2026-76463 has CVSS 8.8 (High). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:L. EPSS: 0.1%.
Is CVE-2026-76463 actively exploited?
No confirmed active exploitation of CVE-2026-76463 as of 2026-10-11.
How do I remediate CVE-2026-76463?
Apply vendor patches for CVE-2026-76463. Monitor Cisco advisories.
What systems are affected by CVE-2026-76463?
CVE-2026-76463 affects: Cisco.
Vulnerability Details
CVE IDCVE-2026-76463
CVSS VectorCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:L
Published2026-10-07
Last Modified2026-10-08
ICS Relevance70%
Weakness (CWE)
Improper Access Control
SourceNVD
Official Description

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76463 are related to improper access control issues that are grouped under the Common Weakness Enumeration (CWE) CWE-284.

Source: NIST NVD / MITRE CVE Database

Affected Products
VendorProductAffected Versions
Cisco — —
Remediation

No patch URL on record. Monitor vendor security advisories directly.

Threat Intelligence
● Threat Intelligence Validated: October 2026 | Threat Age: 3 Days
CISA known-exploitedNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
Related CVEs affecting Cisco
CVE-2026-76482 10.0 As part of Cisco's ongoing commitment to proactive security and product quali... CVE-2009-4912 10.0 Cisco Adaptive Security Appliances (ASA) 5580 series devices with software be... CVE-1999-0775 10.0 Cisco Gigabit Switch routers running IOS allow remote attackers to forward un... CVE-2006-5288 10.0 Cisco 2700 Series Wireless Location Appliances before 2.1.34.0 have a default... CVE-2007-4241 10.0 Buffer overflow in ldcconn in Hewlett-Packard (HP) Controller for Cisco Local...
View all Cisco CVEs →

ICS/OT Vulnerability Intelligence for Your Environment

BreachSpider tracks 384,000+ CVEs and matches them to your ICS/OT assets by exact version, with AI analysis, NERC CIP mapping, and vendor PSIRT contacts.

Create a free account →