Cisco patches 34 vulnerabilities across Expressway, IOS XR and Snort 3
Cisco released fixes for 34 vulnerabilities in Expressway Series, IOS XR, Snort 3 and Unified Communications products. A critical RCE tracked as CVE-2026-76466 in Expressway allows arbitrary command execution as root and was patched in version X15.5.20. Cisco says it is not aware of any exploitation in the wild.
- Expressway Series: 10 flaws, including critical RCE CVE-2026-76466
- Unified Communications: 9 CVEs, three critical — CVE-2026-76473/76474/76475
- Snort 3: 13 CVEs fixed in version 3.12.4.0
- IOS XR: high-severity DoS CVE-2026-76505
Read next
Security