CVE-2026-76473
Unauthorized access to Cisco Unified Communications systems via resource control flaw.
Multiple internally discovered vulnerabilities in Cisco Emergency Responder, Unified CM, Unity Connection and related products involve improper control of a resource through its lifetime. Attackers can exploit this to gain unauthorized access or cause a denial of service. Cisco has issued a security hardening release, but specific fixed versions are not provided; it is not yet listed on CISA's known-exploited list.
Cisco Cisco Emergency Responder · Updated 28 Oct · From the public records
Being exploitedNot reportedNo attacks reported in the records
CISA known exploitedNot listedThe US list of flaws under attack
SeveritycriticalCVSS 9.8 of 10
FixNot yetSee what to do below
Am I affected?
The records do not list fixed versions yet. Check the vendor's advisory below.
What to do
- Apply the Cisco Unified Communications Products Security Hardening Release for October 2026 as soon as possible, following Cisco's official guidance.
- If you cannot apply the release immediately, restrict network access to affected systems and monitor for unusual activity as a workaround per Cisco's recommendations.
- Check Cisco's advisory for any additional workarounds or mitigations if the hardening release is not yet applied.
What happened
- 27 OctCisco releases the Unified Communications Products Security Hardening Release addressing multiple internally discovered vulnerabilities, including CVE-2026-76473.
The record
| CVE | What it is | Severity | CISA listed | Exploit chance, 30 days |
|---|---|---|---|---|
| CVE-2026-76473 | Cisco Unified Communications Products Hardening Release: October 2026 - Improper control of a resource through its lifetime. | critical 9.8 | No | 0.5% |
Our reporting
We have not reported on it. It is here because the sources below did.
Reported elsewhere
Cisco · 27 OctCisco Unified Communications Products Security Hardening Release: October 2026 ↗The records
CVE-2026-76473 on NVD ↗Is anything you run affected?Members connect Zotpaper to their AI assistant. It checks your own project against every vulnerability on this page and the others we track, and says what to update.
How it works