CVE-2026-76473Critical· 9.8▾ MidnightAs part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager (Unified CM), Cisco Unified Comm…
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 53.9 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unity Connection have conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.
The vulnerabilities tracked by CVE-2026-76473 are related to issues concerning improper control of a resource through its lifetime that are grouped under the Common Weakness Enumeration (CWE) Class CWE-74.
emergency_responder 14emergency_responder 14SU1emergency_responder 14SU2emergency_responder 14SU3emergency_responder 14SU3aemergency_responder 15emergency_responder 15SU1emergency_responder 15SU1aemergency_responder 14SU4emergency_responder 15SU2emergency_responder 15SU3emergency_responder 14SU5emergency_responder 15SU4emergency_responder 14SU6unified_communications_manager 14unified_communications_manager 14SU1unified_communications_manager 14SU2unified_communications_manager 14SU3unified_communications_manager 15unified_communications_manager 15SU1unified_communications_manager 14SU4unified_communications_manager 14SU4aunified_communications_manager 15SU1aunified_communications_manager 15SU2unified_communications_manager 15.0.1.13010-1unified_communications_manager 15.0.1.13011-1unified_communications_manager 15.0.1.13012-1unified_communications_manager 15.0.1.13013-1unified_communications_manager 15.0.1.13014-1unified_communications_manager 15.0.1.13015-1unified_communications_manager 15.0.1.13016-1unified_communications_manager 15.0.1.13017-1unified_communications_manager 15SU3aunified_communications_manager 14SU5unified_communications_manager 15SU4unified_communications_manager 15SU4aunified_communications_manager 14SU6unified_communications_manager_im_and_presence_service 14unified_communications_manager_im_and_presence_service 14SU1unified_communications_manager_im_and_presence_service 14SU2unified_communications_manager_im_and_presence_service 14SU2aunified_communications_manager_im_and_presence_service 14SU3unified_communications_manager_im_and_presence_service 15unified_communications_manager_im_and_presence_service 15SU1unified_communications_manager_im_and_presence_service 14SU4unified_communications_manager_im_and_presence_service 15SU2unified_communications_manager_im_and_presence_service 15SU3unified_communications_manager_im_and_presence_service 14SU5unified_communications_manager_im_and_presence_service 15SU4unified_communications_manager_im_and_presence_service 14SU6Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-76477High· 8.8Cisco Unified Communications Products Hardening Release: October 2026 - Injection Vulnerabilities
CVE-2026-76474Critical· 9.8Cisco Unified Communications Products Hardening Release: October 2026 - Improper Authentication Vulnerabilities
CVE-2026-76476High· 8.8Cisco Unified Communications Products Hardening Release: October 2026 - Improper Input Validation Vulnerabilities
CVE-2026-76475Critical· 9.3Cisco Unified Communications Products Hardening Release: October 2026 - Cross-site Scripting Vulnerabilities
CVE-2026-76478High· 8.8Cisco Unified Communications Products Hardening Release: October 2026 - Improper Access Control Vulnerabilities
CVE-2026-76479High· 7.8Cisco Unified Communications Products Hardening Release: October 2026 - Path Traversal Vulnerabilities