Input Validation Vulnerabilities in Cisco Communications Products
CVE-2026-76476

8.8HIGH

Key Information:

Vendor

Cisco
Status
Cisco Emergency Responder
Cisco Unified Communications Manager
Cisco Unified Communications Manager Im And Presence Service
Cisco Unity Connection
Vendor
CVE Published:
21 October 2026

Badges

👾 Exploit Exists

What is CVE-2026-76476?

Cisco's ongoing security enhancements have revealed vulnerabilities across several of its communication products due to improper input validation. The issues identified stem from a comprehensive internal security review that highlighted weaknesses categorized under CWE-20. To mitigate these risks, Cisco has implemented software hardening releases aimed at fortifying the affected products against potential exploitations.

Affected Version(s)

Cisco Emergency Responder 14

Cisco Emergency Responder 14SU1

Cisco Emergency Responder 14SU2

References

https://sec.cloudapps.cisco.com/security/center/content/C...

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.