CVE-2026-76408
Critical · 9.8CVSS
9.8
EPSS
—
Published
Oct 21, 2026
CISA due date
—
The record
As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76408 are related to improper control of a resource through its lifetime and are grouped under the Common Weakness Enumeration (CWE) CWE-664.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-57187 Asterisk is an open source private branch exchange and telephony toolkit. CWE-664
- CVE-2026-57446 libIEC61850 is an open-source implementation of IEC 61850 client and server protocols… CWE-664
- CVE-2026-79603 x86 PV guests can free memory pages while still keeping a stale TLB entry pointing to… CWE-664
- CVE-2026-79289 Improper control of a resource through its lifetime in Workers in Google Chrome prior to… CWE-664
- CVE-2026-18549 @fastify/multipart is a multipart form-data parser for Fastify. CWE-664
- CVE-2026-19380 A vulnerability was identified in Mullvad wireguard.sys 0.10.1. CWE-664
- CVE-2026-20269 As part of Cisco's ongoing commitment to proactive security and product quality, the… CWE-664
- CVE-2026-64721 This issue was addressed through improved state management. CWE-664