Advisories · Technology

Cisco TelePresence Video Communication Server (VCS) Expressway.

Every CVE that names Cisco TelePresence Video Communication Server (VCS) Expressway among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-76497 CVE record

CVSS 6.6 Medium

Cisco Expressway Series Software Hardening Release: October 2026 - Insecure Temporary File Vulnerabilities
- Cisco TelePresence Video Communication Server (VCS) Expressway
- CWE-377
Not analysed yet 21 Oct 2026
CVE-2026-76496 CVE record

CVSS 7.0 High

Cisco Expressway Series Software Hardening Release: October 2026 - Improper Link Resolution Vulnerabilities
- Cisco TelePresence Video Communication Server (VCS) Expressway
- Path traversal
Not analysed yet 21 Oct 2026
CVE-2026-76495 CVE record

CVSS 7.8 High

Cisco Expressway Series Software Hardening Release: October 2026 - Incorrect Permission Assignment Vulnerabilities
- Cisco TelePresence Video Communication Server (VCS) Expressway
- Broken access control
Not analysed yet 21 Oct 2026
CVE-2026-76494 CVE record

CVSS 7.8 High

Cisco Expressway Series Software Hardening Release: October 2026 - Code Injection Vulnerabilities
- Cisco TelePresence Video Communication Server (VCS) Expressway
- Code injection
Not analysed yet 21 Oct 2026
CVE-2026-76493 CVE record

CVSS 7.5 High

Cisco Expressway Series Software Hardening Release: October 2026 - Uncaught Exception Vulnerabilities
- Cisco TelePresence Video Communication Server (VCS) Expressway
- CWE-248
Not analysed yet 21 Oct 2026
CVE-2026-76490 CVE record

CVSS 8.6 High

Cisco Expressway Series Software Hardening Release: October 2026 - Out-of-bounds Write Vulnerabilities
- Cisco TelePresence Video Communication Server (VCS) Expressway
- Memory corruption
Not analysed yet 21 Oct 2026
CVE-2026-76492 CVE record

CVSS 7.5 High

Cisco Expressway Series Software Hardening Release: October 2026 - NULL Pointer Vulnerabilities
- Cisco TelePresence Video Communication Server (VCS) Expressway
- Memory corruption
Not analysed yet 21 Oct 2026
CVE-2026-76491 CVE record

CVSS 7.5 High

Cisco Expressway Series Software Hardening Release: October 2026 - Denial of Service Vulnerabilities
- Cisco TelePresence Video Communication Server (VCS) Expressway
- Denial of service
Not analysed yet 21 Oct 2026
CVE-2026-76435 CVE record

CVSS 5.3 Medium

Cisco Expressway Series Information Disclosure Vulnerability
- Cisco TelePresence Video Communication Server (VCS) Expressway
- Information disclosure
Not analysed yet 21 Oct 2026
CVE-2026-76466 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Cisco Expressway Series Remote Code Execution Vulnerability
- Cisco TelePresence Video Communication Server (VCS) Expressway
- Hard-coded credentials
Not analysed yet 21 Oct 2026
CVE-2025-20179 CVE record

CVSS 6.1 Medium

Cisco Expressway Series Cross-Site Scripting Vulnerability
- Cisco TelePresence Video Communication Server (VCS) Expressway
- Cross-site scripting (XSS)
Not analysed yet 5 Feb 2025
CVE-2022-20814 CVE record

CVSS 7.4 High

Cisco Expressway Series and Cisco TelePresence VCS Improper Certificate Validation Vulnerability
- Cisco TelePresence Video Communication Server (VCS) Expressway
- Weak cryptography or TLS
Not analysed yet 15 Nov 2024
CVE-2022-20853 CVE record

CVSS 7.4 High

Cisco Expressway Series and Cisco TelePresence VCS Cross-Site Request Forgery Vulnerability
- Cisco TelePresence Video Communication Server (VCS) Expressway
- Cross-site request forgery (CSRF)
Not analysed yet 15 Nov 2024
CVE-2024-20492 CVE record

CVSS 6.0 Medium

Cisco Expressway Series Privilege Escalation Vulnerability
- Cisco TelePresence Video Communication Server (VCS) Expressway
- Command injection
Not analysed yet 2 Oct 2024
CVE-2024-20497 CVE record

CVSS 4.3 Medium

Cisco Expressway Edge Improper Authorization Vulnerability
- Cisco TelePresence Video Communication Server (VCS) Expressway
- Broken access control
Not analysed yet 4 Sept 2024
CVE-2024-20400 CVE record

CVSS 4.7 Medium

Open redirect in Cisco TelePresence Video Communication Server (VCS) Expressway
- Cisco TelePresence Video Communication Server (VCS) Expressway
- Open redirect
Not analysed yet 17 Jul 2024
CVE-2024-20255 CVE record

CVSS 8.2 High

Cross-site request forgery in Cisco TelePresence Video Communication Server (VCS) Expressway
- Cisco TelePresence Video Communication Server (VCS) Expressway
- Cross-site request forgery (CSRF)
Not analysed yet 7 Feb 2024
CVE-2024-20254 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

Cross-site request forgery in Cisco TelePresence Video Communication Server (VCS) Expressway
- Cisco TelePresence Video Communication Server (VCS) Expressway
- Cross-site request forgery (CSRF)
Not analysed yet 7 Feb 2024
CVE-2024-20252 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

Cross-site request forgery in Cisco TelePresence Video Communication Server (VCS) Expressway
- Cisco TelePresence Video Communication Server (VCS) Expressway
- Cross-site request forgery (CSRF)
Not analysed yet 7 Feb 2024
CVE-2023-20209 CVE record

CVSS 6.5 Medium

Code injection in Cisco TelePresence Video Communication Server (VCS) Expressway
- Cisco TelePresence Video Communication Server (VCS) Expressway
- Code injection
Not analysed yet 16 Aug 2023
CVE-2023-20192 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

Cisco Expressway Series and Cisco TelePresence Video Communication Server Privilege Escalation Vulnerabilities
- Cisco TelePresence Video Communication Server (VCS) Expressway
- CWE-20
Not analysed yet 28 Jun 2023
CVE-2023-20105 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

Improper input validation in Cisco TelePresence Video Communication Server (VCS) Expressway
- Cisco TelePresence Video Communication Server (VCS) Expressway
- CWE-20
Not analysed yet 28 Jun 2023
CVE-2022-20813 CVE record

CVSS 9.0 CriticalCritical · CVSS 9+

Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities
- Cisco TelePresence Video Communication Server (VCS) Expressway
- CWE-158
Not analysed yet 6 Jul 2022
CVE-2022-20812 CVE record

CVSS 9.0 CriticalCritical · CVSS 9+

Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities
- Cisco TelePresence Video Communication Server (VCS) Expressway
- CWE-158
Not analysed yet 6 Jul 2022
CVE-2022-20807 CVE record

CVSS 4.3 Medium

Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities
- Cisco TelePresence Video Communication Server (VCS) Expressway
- Information disclosure
Not analysed yet 27 May 2022
CVE-2022-20806 CVE record

CVSS 4.3 Medium

Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities
- Cisco TelePresence Video Communication Server (VCS) Expressway
- Information disclosure
Not analysed yet 27 May 2022
CVE-2022-20809 CVE record

CVSS 4.3 Medium

Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities
- Cisco TelePresence Video Communication Server (VCS) Expressway
- Information disclosure
Not analysed yet 26 May 2022
CVE-2022-20755 CVE record

CVSS 9.0 CriticalCritical · CVSS 9+

Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities
- Cisco TelePresence Video Communication Server (VCS) Expressway
- Path traversal
Not analysed yet 6 Apr 2022
CVE-2022-20754 CVE record

CVSS 9.0 CriticalCritical · CVSS 9+

Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities
- Cisco TelePresence Video Communication Server (VCS) Expressway
- Path traversal
Not analysed yet 6 Apr 2022
CVE-2021-34716 CVE record

CVSS 6.7 Medium

Cisco Expressway Series and TelePresence Video Communication Server Remote Code Execution Vulnerability
- Cisco TelePresence Video Communication Server (VCS) Expressway
- CWE-460
Not analysed yet 18 Aug 2021
CVE-2021-34715 CVE record

CVSS 4.7 Medium

Cisco Expressway Series and TelePresence Video Communication Server Image Verification Vulnerability
- Cisco TelePresence Video Communication Server (VCS) Expressway
- Weak cryptography or TLS
Not analysed yet 18 Aug 2021
CVE-2020-3482 CVE record

CVSS 6.5 Medium

Cisco Expressway Software Unauthorized Access Information Disclosure Vulnerability
- Cisco TelePresence Video Communication Server (VCS) Expressway
- Broken access control
Not analysed yet 18 Nov 2020
CVE-2020-3596 CVE record

CVSS 5.9 Medium

Cisco Expressway Series and TelePresence Video Communication Server Denial of Service Vulnerability
- Cisco TelePresence Video Communication Server (VCS) Expressway
- Denial of service
Not analysed yet 8 Oct 2020