Cisco and BeyondTrust patch critical security vulnerabilities

Cisco has released updates to address a critical remote code execution (RCE) vulnerability in its Expressway Series, specifically affecting Expressway-C and Expressway-E. The flaw, identified as CVE-2026-76466, resides in the database service. An unauthenticated attacker with network access could exploit a combination of persistent cookies and insufficient client certificate validation to execute arbitrary operating system commands with root privileges. Cisco noted that there are no effective workarounds, making immediate software updates essential.

Separately, BeyondTrust has patched a critical zero-day vulnerability in its Remote Support solution (formerly Bomgar), identified as CVE-2026-102764. The flaw, which carries a CVSS score of 9.3, involves an authentication bypass via spoofing that allows attackers to perform file operations on the appliance. Reports suggest the vulnerability may have been exploited by Chinese espionage actors to target stored credentials and establish remote sessions. BeyondTrust has released patches for self-hosted versions, while SaaS instances have been updated automatically.