CVE-2026-76438
Cisco BroadWorks CommPilot Application Software Authorization Bypass Vulnerability
Description
A vulnerability in the web-based management interface of Cisco BroadWorks CommPilot Application Software could allow an authenticated, remote attacker with low privileges to alter configurations on an affected device. This vulnerability is due to missing authorization checks. An attacker could exploit this vulnerability by sending a crafted HTTP request. A successful exploit could allow the attacker to alter configurations on select pages.
INFO
Published Date :
Sept. 16, 2026, 8:21 p.m.
Last Modified :
Sept. 16, 2026, 8:21 p.m.
Remotely Exploit :
Yes !
Source :
cisco
CVSS Scores
| Score | Version | Severity | Vector | Exploitability Score | Impact Score | Source |
|---|---|---|---|---|---|---|
| CVSS 3.1 | MEDIUM | MITRE-CVE |
Solution
- Apply Cisco security updates for BroadWorks CommPilot.
- Review and restrict administrative access privileges.
- Monitor network traffic for suspicious requests.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2026-76438 vulnerability anywhere in the article.