Cisco patches 34 security vulnerabilities across multiple enterprise product lines

Cisco announced security updates on Wednesday to address 34 vulnerabilities across its Expressway Series, IOS XR, Snort 3, and Unified Communications products, SecurityWeek reported. The fixes cover multiple critical-severity security defects that could lead to command execution, authentication bypass, and cross-site scripting attacks. [1]

According to SecurityWeek, Cisco patched 10 security flaws affecting the Expressway Series. This set of updates includes a critical-severity remote code execution flaw tracked as CVE-2026-76466. Cisco stated that a successful exploit allows an attacker to execute arbitrary commands as root on the operating system of an affected device. [1]

The critical security defect was remediated in Cisco Expressway Series version X15.5.20, SecurityWeek reported. This specific software update also resolves eight additional common vulnerabilities and exposures that group multiple security issues. [1]

Cisco is an American technology corporation headquartered in San Jose, California, that produces networking, cybersecurity, and telecommunications equipment. System administrators managing affected Cisco devices are advised to update their systems to the patched software versions to protect against potential exploitation. [1][9]