# Cisco Addresses Critical Flaws in Multiple Products with New Patches

*Published October 23, 2026*
*Source: [https://www.securityweek.com/cisco-patches-34-vulnerabilities-across-multiple-products/](https://www.securityweek.com/cisco-patches-34-vulnerabilities-across-multiple-products/)*

## Executive Summary

*This is a Premium edition. The Executive Summary is available to sec-news.ai members —*
*[read it here](https://www.sec-news.ai/news/cisco-addresses-critical-flaws-in-multiple-products-with-new-patches) or [see plans](https://www.sec-news.ai/pricing).*

## Article

Cisco has released patches for 34 vulnerabilities across several of its products, including Expressway Series, IOS XR, Snort 3, and Unified Communications. This move is crucial in mitigating the risks posed by various security flaws that could potentially be exploited by attackers. Notably, the Expressway Series received updates for ten vulnerabilities, one of which is a critical remote code execution bug identified as CVE-2026-76466. This vulnerability could allow attackers to execute arbitrary commands on affected systems, exploiting weaknesses such as the use of persistent cookies and insufficient validation of client certificates.

The security patch for the Expressway Series, now available in version X15.5.20, addresses these critical issues, along with other vulnerabilities grouped under specific CWE categories. Additionally, a medium-severity information disclosure flaw has also been rectified. In the realm of Unified Communications products, nine vulnerabilities were patched, including critical issues like improper resource control and improper authentication, tracked under CVE-2026-76473, CVE-2026-76474, and CVE-2026-76475.

Cisco has also focused on Snort 3, patching 13 CVEs, some of which involve critical incorrect calculation and out-of-bounds write issues. These updates are included in Snort 3 version 3.12.4.0 and extend to security updates for various other Cisco products such as Cyber Vision and Secure Firewall ASA. Additionally, a denial-of-service vulnerability in IOS XR and a privilege escalation flaw in Secure Client’s Secure Firewall Posture module have been addressed.

Cisco reports that there have been no known exploits of these vulnerabilities in the wild. For more detailed information, Cisco advises checking their security advisories page and the notification issued on October 21.