---
id: CVE-2026-76473
title: >-
  Cisco Unified Communications Products Hardening Release: October 2026 -
  Improper control of a resource through its lifetime.
summary: >-
  As part of Cisco's ongoing commitment to proactive security and product
  quality, engineering teams for Cisco Emergency Responder, Cisco Prime
  Collaboration Deployment, Cisco Unified Communications Manager (Unified CM),
  Cisco Unified Comm…
severity: critical
cvss: 9.8
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
cvssSource: cna
cwe:
  - CWE-74
vendor: Cisco
product: Cisco Emergency Responder
affected:
  - emergency_responder 14
  - emergency_responder 14SU1
  - emergency_responder 14SU2
  - emergency_responder 14SU3
  - emergency_responder 14SU3a
  - emergency_responder 15
  - emergency_responder 15SU1
  - emergency_responder 15SU1a
  - emergency_responder 14SU4
  - emergency_responder 15SU2
  - emergency_responder 15SU3
  - emergency_responder 14SU5
  - emergency_responder 15SU4
  - emergency_responder 14SU6
  - unified_communications_manager 14
  - unified_communications_manager 14SU1
  - unified_communications_manager 14SU2
  - unified_communications_manager 14SU3
  - unified_communications_manager 15
  - unified_communications_manager 15SU1
  - unified_communications_manager 14SU4
  - unified_communications_manager 14SU4a
  - unified_communications_manager 15SU1a
  - unified_communications_manager 15SU2
  - unified_communications_manager 15.0.1.13010-1
  - unified_communications_manager 15.0.1.13011-1
  - unified_communications_manager 15.0.1.13012-1
  - unified_communications_manager 15.0.1.13013-1
  - unified_communications_manager 15.0.1.13014-1
  - unified_communications_manager 15.0.1.13015-1
  - unified_communications_manager 15.0.1.13016-1
  - unified_communications_manager 15.0.1.13017-1
  - unified_communications_manager 15SU3a
  - unified_communications_manager 14SU5
  - unified_communications_manager 15SU4
  - unified_communications_manager 15SU4a
  - unified_communications_manager 14SU6
  - unified_communications_manager_im_and_presence_service 14
  - unified_communications_manager_im_and_presence_service 14SU1
  - unified_communications_manager_im_and_presence_service 14SU2
  - unified_communications_manager_im_and_presence_service 14SU2a
  - unified_communications_manager_im_and_presence_service 14SU3
  - unified_communications_manager_im_and_presence_service 15
  - unified_communications_manager_im_and_presence_service 15SU1
  - unified_communications_manager_im_and_presence_service 14SU4
  - unified_communications_manager_im_and_presence_service 15SU2
  - unified_communications_manager_im_and_presence_service 15SU3
  - unified_communications_manager_im_and_presence_service 14SU5
  - unified_communications_manager_im_and_presence_service 15SU4
  - unified_communications_manager_im_and_presence_service 14SU6
published: '2026-10-21'
updated: '2026-10-21'
sourceUpdated: '2026-10-21T16:14:31.067Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-76473'
references:
  - url: >-
      https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-voice-hardening-twgbH9e3
    label: cisco-sa-voice-hardening-twgbH9e3
tags:
  - cve.org
ingestedAt: '2026-10-21T17:07:51.303Z'
---

## Overview

As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unity Connection have conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.

The vulnerabilities tracked by CVE-2026-76473 are related to issues concerning improper control of a resource through its lifetime that are grouped under the Common Weakness Enumeration (CWE) Class CWE-74.
 

## Affected

- `emergency_responder 14`
- `emergency_responder 14SU1`
- `emergency_responder 14SU2`
- `emergency_responder 14SU3`
- `emergency_responder 14SU3a`
- `emergency_responder 15`
- `emergency_responder 15SU1`
- `emergency_responder 15SU1a`
- `emergency_responder 14SU4`
- `emergency_responder 15SU2`
- `emergency_responder 15SU3`
- `emergency_responder 14SU5`
- `emergency_responder 15SU4`
- `emergency_responder 14SU6`
- `unified_communications_manager 14`
- `unified_communications_manager 14SU1`
- `unified_communications_manager 14SU2`
- `unified_communications_manager 14SU3`
- `unified_communications_manager 15`
- `unified_communications_manager 15SU1`
- `unified_communications_manager 14SU4`
- `unified_communications_manager 14SU4a`
- `unified_communications_manager 15SU1a`
- `unified_communications_manager 15SU2`
- `unified_communications_manager 15.0.1.13010-1`
- `unified_communications_manager 15.0.1.13011-1`
- `unified_communications_manager 15.0.1.13012-1`
- `unified_communications_manager 15.0.1.13013-1`
- `unified_communications_manager 15.0.1.13014-1`
- `unified_communications_manager 15.0.1.13015-1`
- `unified_communications_manager 15.0.1.13016-1`
- `unified_communications_manager 15.0.1.13017-1`
- `unified_communications_manager 15SU3a`
- `unified_communications_manager 14SU5`
- `unified_communications_manager 15SU4`
- `unified_communications_manager 15SU4a`
- `unified_communications_manager 14SU6`
- `unified_communications_manager_im_and_presence_service 14`
- `unified_communications_manager_im_and_presence_service 14SU1`
- `unified_communications_manager_im_and_presence_service 14SU2`
- `unified_communications_manager_im_and_presence_service 14SU2a`
- `unified_communications_manager_im_and_presence_service 14SU3`
- `unified_communications_manager_im_and_presence_service 15`
- `unified_communications_manager_im_and_presence_service 15SU1`
- `unified_communications_manager_im_and_presence_service 14SU4`
- `unified_communications_manager_im_and_presence_service 15SU2`
- `unified_communications_manager_im_and_presence_service 15SU3`
- `unified_communications_manager_im_and_presence_service 14SU5`
- `unified_communications_manager_im_and_presence_service 15SU4`
- `unified_communications_manager_im_and_presence_service 14SU6`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.