Improper Access Control Vulnerability in Cisco Unified Communications Products
CVE-2026-76478

8.8HIGH

Key Information:

Vendor

Cisco
Status
Cisco Emergency Responder
Cisco Unified Communications Manager
Cisco Unified Communications Manager Im And Presence Service
Cisco Unity Connection
Vendor
CVE Published:
21 October 2026

Badges

👾 Exploit Exists

What is CVE-2026-76478?

The vulnerability identified in Cisco's Unified Communications products pertains to improper access control mechanisms. This issue allows unauthorized access to functionalities that should be restricted, potentially leading to unauthorized actions or data exposure. In response, Cisco's engineering teams have conducted an extensive security review and released software updates to mitigate these vulnerabilities, enhancing overall product security.

Affected Version(s)

Cisco Emergency Responder 14

Cisco Emergency Responder 14SU1

Cisco Emergency Responder 14SU2

References

https://sec.cloudapps.cisco.com/security/center/content/C...

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.