CVE-2026-76477High· 8.8▾ TwilightAs part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager (Unified CM), Cisco Unified Comm…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 48.4 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unity Connection have conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.
The vulnerabilities tracked by CVE-2026-76477 are related to issues concerning improper neutralization of special elements used in an SQL command that are grouped under the Common Weakness Enumeration (CWE) Base CWE-89.
emergency_responder 14emergency_responder 14SU1emergency_responder 14SU2emergency_responder 14SU3emergency_responder 14SU3aemergency_responder 15emergency_responder 15SU1emergency_responder 15SU1aemergency_responder 14SU4emergency_responder 15SU2emergency_responder 15SU3emergency_responder 14SU5emergency_responder 15SU4emergency_responder 14SU6unified_communications_manager 14unified_communications_manager 14SU1unified_communications_manager 14SU2unified_communications_manager 14SU3unified_communications_manager 15unified_communications_manager 15SU1unified_communications_manager 14SU4unified_communications_manager 14SU4aunified_communications_manager 15SU1aunified_communications_manager 15SU2unified_communications_manager 15.0.1.13010-1unified_communications_manager 15.0.1.13011-1unified_communications_manager 15.0.1.13012-1unified_communications_manager 15.0.1.13013-1unified_communications_manager 15.0.1.13014-1unified_communications_manager 15.0.1.13015-1unified_communications_manager 15.0.1.13016-1unified_communications_manager 15.0.1.13017-1unified_communications_manager 15SU3aunified_communications_manager 14SU5unified_communications_manager 15SU4unified_communications_manager 15SU4aunified_communications_manager 14SU6unified_communications_manager_im_and_presence_service 14unified_communications_manager_im_and_presence_service 14SU1unified_communications_manager_im_and_presence_service 14SU2unified_communications_manager_im_and_presence_service 14SU2aunified_communications_manager_im_and_presence_service 14SU3unified_communications_manager_im_and_presence_service 15unified_communications_manager_im_and_presence_service 15SU1unified_communications_manager_im_and_presence_service 14SU4unified_communications_manager_im_and_presence_service 15SU2unified_communications_manager_im_and_presence_service 15SU3unified_communications_manager_im_and_presence_service 14SU5unified_communications_manager_im_and_presence_service 15SU4unified_communications_manager_im_and_presence_service 14SU6Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-76474Critical· 9.8Cisco Unified Communications Products Hardening Release: October 2026 - Improper Authentication Vulnerabilities
CVE-2026-76473Critical· 9.8Cisco Unified Communications Products Hardening Release: October 2026 - Improper control of a resource through its lifetime.
CVE-2026-76476High· 8.8Cisco Unified Communications Products Hardening Release: October 2026 - Improper Input Validation Vulnerabilities
CVE-2026-76475Critical· 9.3Cisco Unified Communications Products Hardening Release: October 2026 - Cross-site Scripting Vulnerabilities
CVE-2026-76478High· 8.8Cisco Unified Communications Products Hardening Release: October 2026 - Improper Access Control Vulnerabilities
CVE-2026-76479High· 7.8Cisco Unified Communications Products Hardening Release: October 2026 - Path Traversal Vulnerabilities