Improper Authentication Vulnerability in Cisco Unified Communications Products
CVE-2026-76474

9.8CRITICAL

Key Information:

Vendor

Cisco
Status
Cisco Emergency Responder
Cisco Unified Communications Manager
Cisco Unified Communications Manager Im And Presence Service
Cisco Unity Connection
Vendor
CVE Published:
21 October 2026

Badges

👾 Exploit Exists

What is CVE-2026-76474?

The vulnerability pertains to improper authentication mechanisms identified in various Cisco Unified Communications products. This issue can potentially allow unauthorized access to sensitive features and services, leading to security risks. Cisco has issued software hardening releases to mitigate these vulnerabilities following their internal security review. The vulnerabilities are categorized under the Common Weakness Enumeration as CWE-287, highlighting the necessity for robust authentication measures in communication systems.

Affected Version(s)

Cisco Emergency Responder 14

Cisco Emergency Responder 14SU1

Cisco Emergency Responder 14SU2

References

https://sec.cloudapps.cisco.com/security/center/content/C...

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.