What’s Vulnerable › Products

Cisco TelePresence Video Communication Server (VCS) Expressway vulnerabilities

53 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 13 published in the last 12 months.

Check whether your Cisco TelePresence Video Communication Server (VCS) Expressway version is affected

Exploited Cisco TelePresence Video Communication Server (VCS) Expressway vulnerabilities

• CVE-2023-44487 — HTTP/2 Rapid Reset Attack Vulnerability

Latest Cisco TelePresence Video Communication Server (VCS) Expressway vulnerabilities

• CVE-2026-76497 — Cisco Expressway Series Software Hardening Release: October 2026 - Insecure Temporary File Vulnerabilities (CVSS 6.6)
• CVE-2026-76496 — Cisco Expressway Series Software Hardening Release: October 2026 - Improper Link Resolution Vulnerabilities (CVSS 7.0)
• CVE-2026-76495 — Cisco Expressway Series Software Hardening Release: October 2026 - Incorrect Permission Assignment Vulnerabilities (CVSS 7.8)
• CVE-2026-76494 — Cisco Expressway Series Software Hardening Release: October 2026 - Code Injection Vulnerabilities (CVSS 7.8)
• CVE-2026-76493 — Cisco Expressway Series Software Hardening Release: October 2026 - Uncaught Exception Vulnerabilities (CVSS 7.5)
• CVE-2026-76492 — Cisco Expressway Series Software Hardening Release: October 2026 - NULL Pointer Vulnerabilities (CVSS 7.5)
• CVE-2026-76491 — Cisco Expressway Series Software Hardening Release: October 2026 - Denial of Service Vulnerabilities (CVSS 7.5)
• CVE-2026-76490 — Cisco Expressway Series Software Hardening Release: October 2026 - Out-of-bounds Write Vulnerabilities (CVSS 8.6)
• CVE-2026-76466 — Cisco Expressway Series Remote Code Execution Vulnerability (CVSS 9.8)
• CVE-2026-76435 — Cisco Expressway Series Information Disclosure Vulnerability (CVSS 5.3)
• CVE-2025-20179 — Cisco Expressway Series Cross-Site Scripting Vulnerability (CVSS 6.1)
• CVE-2022-20853 — Cisco Expressway Series and Cisco TelePresence VCS Cross-Site Request Forgery Vulnerability (CVSS 7.4)
• CVE-2022-20814 — Cisco Expressway Series and Cisco TelePresence VCS Improper Certificate Validation Vulnerability (CVSS 7.4)
• CVE-2024-20492 — Cisco Expressway Series Privilege Escalation Vulnerability (CVSS 6.7)
• CVE-2024-20400 — (CVSS 4.7)
• CVE-2023-44487 — HTTP/2 Rapid Reset Attack Vulnerability (CVSS 7.5) — exploited
• CVE-2023-20209 — (CVSS 7.2)
• CVE-2023-20192 — Cisco Expressway Series and Cisco TelePresence Video Communication Server Privilege Escalation Vulnerabilities (CVSS 7.7)
• CVE-2023-20105 — (CVSS 6.5)
• CVE-2022-20813 — Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities (CVSS 5.9)
• CVE-2022-20812 — Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities (CVSS 6.5)
• CVE-2022-20807 — Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities (CVSS 6.5)
• CVE-2022-20806 — Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities (CVSS 7.1)
• CVE-2022-20809 — Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities (CVSS 6.5)
• CVE-2022-20755 — Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities (CVSS 7.2)