Cisco patches critical unauthenticated root RCE (CVE-2026-76466) in Expressway Series database service
Cisco disclosed a critical vulnerability, CVE-2026-76466, in the database service of Cisco Expressway Series (Expressway-C and Expressway-E). An unauthenticated remote attacker with network access could execute arbitrary operating system commands as root. The flaw stems from the use of persistent cookies and insufficient client certificat…