{"id":"CVE-2026-76474","title":"Cisco Unified Communications Products Hardening Release: October 2026 - Improper Authentication Vulnerabilities","summary":"As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager (Unified CM), Cisco Unified Comm…","severity":"critical","cvss":9.8,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvssSource":"cna","cwe":["CWE-287"],"vendor":"Cisco","product":"Cisco Emergency Responder","affected":["emergency_responder 14","emergency_responder 14SU1","emergency_responder 14SU2","emergency_responder 14SU3","emergency_responder 14SU3a","emergency_responder 15","emergency_responder 15SU1","emergency_responder 15SU1a","emergency_responder 14SU4","emergency_responder 15SU2","emergency_responder 15SU3","emergency_responder 14SU5","emergency_responder 15SU4","emergency_responder 14SU6","unified_communications_manager 14","unified_communications_manager 14SU1","unified_communications_manager 14SU2","unified_communications_manager 14SU3","unified_communications_manager 15","unified_communications_manager 15SU1","unified_communications_manager 14SU4","unified_communications_manager 14SU4a","unified_communications_manager 15SU1a","unified_communications_manager 15SU2","unified_communications_manager 15.0.1.13010-1","unified_communications_manager 15.0.1.13011-1","unified_communications_manager 15.0.1.13012-1","unified_communications_manager 15.0.1.13013-1","unified_communications_manager 15.0.1.13014-1","unified_communications_manager 15.0.1.13015-1","unified_communications_manager 15.0.1.13016-1","unified_communications_manager 15.0.1.13017-1","unified_communications_manager 15SU3a","unified_communications_manager 14SU5","unified_communications_manager 15SU4","unified_communications_manager 15SU4a","unified_communications_manager 14SU6","unified_communications_manager_im_and_presence_service 14","unified_communications_manager_im_and_presence_service 14SU1","unified_communications_manager_im_and_presence_service 14SU2","unified_communications_manager_im_and_presence_service 14SU2a","unified_communications_manager_im_and_presence_service 14SU3","unified_communications_manager_im_and_presence_service 15","unified_communications_manager_im_and_presence_service 15SU1","unified_communications_manager_im_and_presence_service 14SU4","unified_communications_manager_im_and_presence_service 15SU2","unified_communications_manager_im_and_presence_service 15SU3","unified_communications_manager_im_and_presence_service 14SU5","unified_communications_manager_im_and_presence_service 15SU4","unified_communications_manager_im_and_presence_service 14SU6"],"published":"2026-10-21","updated":"2026-10-21","sourceUpdated":"2026-10-21T16:14:48.265Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-76474","references":[{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-voice-hardening-twgbH9e3","label":"cisco-sa-voice-hardening-twgbH9e3"}],"tags":["cve.org"],"ingestedAt":"2026-10-21T17:07:51.303Z","slug":"CVE-2026-76474","body":"## Overview\n\nAs part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unity Connection have conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.\r\n\r\nThe vulnerabilities tracked by CVE-2026-76474 are related to issues concerning improper authentication that are grouped under the Common Weakness Enumeration (CWE) Class CWE-287.\n\n## Affected\n\n- `emergency_responder 14`\n- `emergency_responder 14SU1`\n- `emergency_responder 14SU2`\n- `emergency_responder 14SU3`\n- `emergency_responder 14SU3a`\n- `emergency_responder 15`\n- `emergency_responder 15SU1`\n- `emergency_responder 15SU1a`\n- `emergency_responder 14SU4`\n- `emergency_responder 15SU2`\n- `emergency_responder 15SU3`\n- `emergency_responder 14SU5`\n- `emergency_responder 15SU4`\n- `emergency_responder 14SU6`\n- `unified_communications_manager 14`\n- `unified_communications_manager 14SU1`\n- `unified_communications_manager 14SU2`\n- `unified_communications_manager 14SU3`\n- `unified_communications_manager 15`\n- `unified_communications_manager 15SU1`\n- `unified_communications_manager 14SU4`\n- `unified_communications_manager 14SU4a`\n- `unified_communications_manager 15SU1a`\n- `unified_communications_manager 15SU2`\n- `unified_communications_manager 15.0.1.13010-1`\n- `unified_communications_manager 15.0.1.13011-1`\n- `unified_communications_manager 15.0.1.13012-1`\n- `unified_communications_manager 15.0.1.13013-1`\n- `unified_communications_manager 15.0.1.13014-1`\n- `unified_communications_manager 15.0.1.13015-1`\n- `unified_communications_manager 15.0.1.13016-1`\n- `unified_communications_manager 15.0.1.13017-1`\n- `unified_communications_manager 15SU3a`\n- `unified_communications_manager 14SU5`\n- `unified_communications_manager 15SU4`\n- `unified_communications_manager 15SU4a`\n- `unified_communications_manager 14SU6`\n- `unified_communications_manager_im_and_presence_service 14`\n- `unified_communications_manager_im_and_presence_service 14SU1`\n- `unified_communications_manager_im_and_presence_service 14SU2`\n- `unified_communications_manager_im_and_presence_service 14SU2a`\n- `unified_communications_manager_im_and_presence_service 14SU3`\n- `unified_communications_manager_im_and_presence_service 15`\n- `unified_communications_manager_im_and_presence_service 15SU1`\n- `unified_communications_manager_im_and_presence_service 14SU4`\n- `unified_communications_manager_im_and_presence_service 15SU2`\n- `unified_communications_manager_im_and_presence_service 15SU3`\n- `unified_communications_manager_im_and_presence_service 14SU5`\n- `unified_communications_manager_im_and_presence_service 15SU4`\n- `unified_communications_manager_im_and_presence_service 14SU6`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"midnight","depthScore":54,"depthScoreParts":{"impact":53.9,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}