A vulnerability in the web-based management interface of Cisco BroadWorks CommPilot Application Software could allow an authenticated, remote attacker with low privileges to alter configurations on an affected device.
This vulnerability is due to missing authorization checks. An attacker could exploit this vulnerability by sending a crafted HTTP request. A successful exploit could allow the attacker to alter configurations on select pages.
Metrics
Affected Vendors & Products
References
History
Fri, 16 Oct 2026 14:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Cisco
Cisco broadworks |
|
| Vendors & Products |
Cisco
Cisco broadworks |
Thu, 17 Sep 2026 14:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Wed, 16 Sep 2026 20:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A vulnerability in the web-based management interface of Cisco BroadWorks CommPilot Application Software could allow an authenticated, remote attacker with low privileges to alter configurations on an affected device. This vulnerability is due to missing authorization checks. An attacker could exploit this vulnerability by sending a crafted HTTP request. A successful exploit could allow the attacker to alter configurations on select pages. | |
| Title | Cisco BroadWorks CommPilot Application Software Authorization Bypass Vulnerability | |
| Weaknesses | CWE-863 | |
| References |
| |
| Metrics |
cvssV3_1
|
Status: PUBLISHED
Assigner: cisco
Published: 2026-09-16T20:21:02.268Z
Updated: 2026-09-17T13:40:59.235Z
Reserved: 2026-08-19T12:02:03.635Z
Link: CVE-2026-76438
Updated: 2026-09-17T13:36:37.474Z
Status : Awaiting Analysis
Published: 2026-09-16T21:17:15.373
Modified: 2026-09-18T13:28:28.567
Link: CVE-2026-76438
No data.