CVE-2026-76438
published 2026-09-16CVE-2026-76438: A vulnerability in the web-based management interface of Cisco BroadWorks CommPilot Application Software could allow an authenticated, remote attacker with low…
PriorityP344medium6.5CVSS 3.1
AVNACLPRLUINSUCNIHAN
EPSS
0.56%
45.7th percentile
A vulnerability in the web-based management interface of Cisco BroadWorks CommPilot Application Software could allow an authenticated, remote attacker with low privileges to alter configurations on an affected device.
This vulnerability is due to missing authorization checks. An attacker could exploit this vulnerability by sending a crafted HTTP request. A successful exploit could allow the attacker to alter configurations on select pages.
Affected
7989 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | cisco_broadworks | — | — |
| cisco | cisco_broadworks | — | — |
| cisco | cisco_broadworks | — | — |
| cisco | cisco_broadworks | — | — |
| cisco | cisco_broadworks | — | — |
| cisco | cisco_broadworks | — | — |
| cisco | cisco_broadworks | — | — |
| cisco | cisco_broadworks | — | — |
| cisco | cisco_broadworks | — | — |
| cisco | cisco_broadworks | — | — |
| cisco | cisco_broadworks | — | — |
| cisco | cisco_broadworks | — | — |
| cisco | cisco_broadworks | — | — |
| cisco | cisco_broadworks | — | — |
| cisco | cisco_broadworks | — | — |
| cisco | cisco_broadworks | — | — |
| cisco | cisco_broadworks | — | — |
| cisco | cisco_broadworks | — | — |
| cisco | cisco_broadworks | — | — |
| cisco | cisco_broadworks | — | — |
| cisco | cisco_broadworks | — | — |
| cisco | cisco_broadworks | — | — |
| cisco | cisco_broadworks | — | — |
| cisco | cisco_broadworks | — | — |
| cisco | cisco_broadworks | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Cisco BroadWorks Web-based Management Interface improper authorization (EUVD-2026-81161)
vuldb·2026-09-17·CVSS 6.5
CVE-2026-76438 [MEDIUM] Cisco BroadWorks Web-based Management Interface improper authorization (EUVD-2026-81161)
A vulnerability classified as problematic has been found in Cisco BroadWorks. This affects an unknown part of the component Web-based Management Interface. The manipulation leads to improper authorization.
This vulnerability is referenced as CVE-2026-76438. Remote exploitation of the attack is possible. No exploit is available.
It is recommended to upgrade the affected component.
GHSA
A vulnerability in the web-based management interface of Cisco BroadWorks CommPilot Application Software could allow an authenticated, remote attacker with low privileges to alter configurations on an
ghsa_unreviewed·2026-09-16
CVE-2026-76438 [MEDIUM] CWE-863 A vulnerability in the web-based management interface of Cisco BroadWorks CommPilot Application Software could allow an authenticated, remote attacker with low privileges to alter configurations on an
A vulnerability in the web-based management interface of Cisco BroadWorks CommPilot Application Software could allow an authenticated, remote attacker with low privileges to alter configurations on an affected device.
This vulnerability is due to missing authorization checks. An attacker could exploit this vulnerability by sending a crafted HTTP request. A successful exploit could allow the attacker to alter configurations on select pages.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-09-16
Published