CVE-2026-76285
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk20th percentile - higher than 20% of all known CVEs
Summary
As part of Cisco's internal security review, a software hardening release was issued that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked as CVE-2026-76285 relate to improper adherence to coding standards and are grouped under CWE-710.
Risk Assessment
Improper adherence to coding standards can lead to implementation errors and potential security weaknesses in Cisco products.
Recommendation
Apply the hardening release issued by Cisco for the affected products.
Other vulnerabilities in Cisco
See all- CVE-2026-76531Critical
Cisco's internal security review discovered multiple vulnerabilities related to files or directories accessible to external parties (CWE-552). Fixes were released as part of a software hardening update.
- CVE-2026-76529Critical
Cisco conducted an internal security review resulting in a software hardening release that addresses multiple internally discovered vulnerabilities. CVE-2026-76529 relates to improper protection of alternate path (CWE-424).
- CVE-2026-76528Critical
Cisco conducted a comprehensive internal security review resulting in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76528 relate to protection mechanism failure and are grouped under CWE-693.
- CVE-2026-76527Critical
Cisco conducted a comprehensive internal security review resulting in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76527 relate to improper check or handling of exceptional conditions and are grouped under CWE-703.
- CVE-2026-76408Critical
Cisco conducted an internal security review resulting in a software hardening release that addresses multiple internally discovered vulnerabilities. CVE-2026-76408 relates to improper control of a resource through its lifetime (CWE-664).
- CVE-2026-76407Critical
Cisco conducted a comprehensive internal security review resulting in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76407 relate to improper access control and are grouped under CWE-284.
- CVE-2026-76302Critical
Cisco's internal security review discovered multiple vulnerabilities related to improper neutralization (CWE-707). Fixes were released as part of a software hardening update.
- CVE-2026-76301Critical
Cisco conducted an internal security review resulting in a software hardening release that addresses multiple internally discovered vulnerabilities. CVE-2026-76301 relates to protection mechanism failure (CWE-693).
- CVE-2026-76299Critical
Cisco conducted an internal security review resulting in a software hardening release. The vulnerabilities tracked by this CVE relate to improper access control and are classified under CWE-284.
- CVE-2026-76284Critical
As part of Cisco's internal security review, a software hardening release was issued that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked as CVE-2026-76284 relate to improper neutralization and are grouped under CWE-707.
Original NVD description (English source)
As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76285 are related to improper adherence to coding standards and are grouped under the Common Weakness Enumeration (CWE) CWE-710.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS