Web Application Vulnerability in Cisco Unified Communications Suite
CVE-2026-76475

9.3CRITICAL

Key Information:

Vendor

Cisco
Status
Cisco Emergency Responder
Cisco Unified Communications Manager
Cisco Unified Communications Manager Im And Presence Service
Cisco Unity Connection
Vendor
CVE Published:
21 October 2026

Badges

👾 Exploit Exists

What is CVE-2026-76475?

Cisco has identified vulnerabilities in its Unified Communications Suite, including products such as Emergency Responder and Unity Connection. These vulnerabilities stem from improper input neutralization during web page generation, which may allow attackers to conduct cross-site scripting (XSS) attacks. As a result, the affected products underwent a thorough security review, leading to the release of software updates that strengthen the overall security posture by addressing these critical weaknesses.

Affected Version(s)

Cisco Emergency Responder 14

Cisco Emergency Responder 14SU1

Cisco Emergency Responder 14SU2

References

https://sec.cloudapps.cisco.com/security/center/content/C...

CVSS V3.1

Score:
9.3
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.