Improper Resource Control in Cisco Unified Communications Products
CVE-2026-76473

9.8CRITICAL

Key Information:

Vendor

Cisco
Status
Cisco Emergency Responder
Cisco Unified Communications Manager
Cisco Unified Communications Manager Im And Presence Service
Cisco Unity Connection
Vendor
CVE Published:
21 October 2026

Badges

👾 Exploit Exists

What is CVE-2026-76473?

This vulnerability is associated with issues in the Cisco Unified Communications suite that stem from improper control of a resource throughout its lifecycle. A comprehensive internal security review led by Cisco's engineering teams identified these vulnerabilities, highlighting the need for software hardening releases. The vulnerabilities fall under the Common Weakness Enumeration class CWE-74, indicating potential security risks if left unaddressed. Users of affected Cisco products are encouraged to implement the recommended updates to safeguard their systems.

Affected Version(s)

Cisco Emergency Responder 14

Cisco Emergency Responder 14SU1

Cisco Emergency Responder 14SU2

References

https://sec.cloudapps.cisco.com/security/center/content/C...

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.