CVE-2026-76474

LOWCVSS 9.8 · CRITICAL

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unity Connection have conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76474 are related to issues concerning improper authentication that are grouped under the Common Weakness Enumeration (CWE) Class CWE-287.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-voice-hardening-twgbH9e3

Weakness type (CWE)

CWE-287

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Deep dive

Full discourse2 posts

takenaka hiroya@Joe_Biden_ja18h
Cisco Unified CMなど音声製品に認証不備（CVSS 9.8）。15SU5で修正済みで、回避策はありません。10月21日付のCiscoアドバイザリをもとに、対象製品と修正版を整理しました。 https://cve.autoarticles.net/cve/CVE-2026-76474
0000036
558 followersView on X
Daily CyberSecurity@Daily_CyberSec1d
Cisco's security hardening release fixes Cisco Unified CM vulnerabilities, including CVSS 9.8 flaws CVE-2026-76473 and CVE-2026-76474. #Cisco #UnifiedCM #CVE202676473 #CVE202676474 #CVE202676487 #SecurityHardening #VoIP #CyberSecurity https://securityonline.info/cisco-unified-cm-vulnerabilities-hardening/
00000281
13.0K followersView on X

Explore more

Back to dashboard