Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
4484 articles · 253904 vulns · 37/41 feeds (7d)
← Back to list
9.8
CVE-2026-76474
cis · emergency responder

Cisco Unified Communications Products Hardening Release: October 2026 - Improper Authentication Vulnerabilities

Description

As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unity Connection have conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76474 are related to issues concerning improper authentication that are grouped under the Common Weakness Enumeration (CWE) Class CWE-287.

Affected Products

VendorProductVersions
cisemergency responder14, 14SU1, 14SU2, 14SU3, 14SU3a, 15, 15SU1, 15SU1a, 14SU4, 15SU2, 15SU3, 14SU5, 15SU4, 14SU6, 14, 14SU1, 14SU2, 14SU3, 15, 15SU1, 14SU4, 14SU4a, 15SU1a, 15SU2, 15.0.1.13010-1, 15.0.1.13011-1, 15.0.1.13012-1, 15.0.1.13013-1, 15.0.1.13014-1, 15.0.1.13015-1, 15.0.1.13016-1, 15.0.1.13017-1, 15SU3a, 14SU5, 15SU4, 15SU4a, 14SU6, 14, 14SU1, 14SU2, 14SU2a, 14SU3, 15, 15SU1, 14SU4, 15SU2, 15SU3, 14SU5, 15SU4, 14SU6, 14, 14SU1, 14SU2, 14SU3, 14SU3a, 15, 15SU1, 14SU4, 15SU2, 15SU3, 14SU5, 15SU4, 14SU6

Also Affects

Downstream vendors/products affected by this vulnerability

VendorProductSourceConfidence
cisemergency respondercert_advisory90%
cisunified communications manager im & presencecert_advisory90%
cisunified communications manager (cucm)cert_advisory90%
cisunity connectioncert_advisory90%
cisprime collaborationcert_advisory90%

References

  • https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-voice-hardening-twgbH9e3

Related News (4 articles)

Tier B
BSI Advisories7d ago
[NEU] [hoch] Cisco Produkte (Emergency Responder, Prime Collaboration, Unified Communications Manager und Unity Connection): Mehrere Schwachstellen
→ No new info (linked only)
Tier B
CERT-FR7d ago
Multiples vulnérabilités dans les produits Cisco (22 octobre 2026)
→ No new info (linked only)
Tier B
CERT-FR7d ago
Multiples vulnérabilités dans les produits Cisco (22 octobre 2026)
→ No new info (linked only)
Tier C
VulDB7d ago
CVE-2026-76474 | Cisco Emergency Responder improper authentication
→ No new info (linked only)

Discussion (0)

Loading…

CVSS 3.19.8 CRITICAL
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA KEV❌ No
Actively exploited❌ No
CWECWE-287
PublishedOct 21, 2026
Trending Score29
Source articles4
Independent3
Info Completeness0/14
Missing: cve_id, title, description, vendor, product, versions, cvss, epss, cwe, kev, exploit, patch, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

CRITICALCVE-2026-76519EXPKEV
Cisco Secure Email Gateway Arbitrary File Write Vulnerability
Trending: 164
HIGHCVE-2026-20349
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service Vulnerability
Trending: 91
HIGHCVE-2026-76418
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service Vulnerability
Trending: 60
CRITICALCVE-2026-76466
Cisco Expressway Series Remote Code Execution Vulnerability
Trending: 35
CRITICALCVE-2026-76473
Cisco Unified Communications Products Hardening Release: October 2026 - Improper control of a resource through its lifetime.
Trending: 29

Pin to Dashboard

Verification

State: unverified
Confidence: 0%

Vulnerability Timeline

CVE Published
Oct 21, 2026
Discovered by ZDM
Oct 21, 2026