CVE-2026-76474
Improper authentication flaw allows attacker access to Cisco UC products
Cisco discovered multiple improper authentication vulnerabilities in its Unified Communications products, including Emergency Responder, Prime Collaboration, and Unified CM. These vulnerabilities could allow an attacker to bypass authentication and gain unauthorized access. Cisco has released a hardening release to fix the issues; there is no evidence of active exploitation.
Cisco Cisco Emergency Responder · Updated 28 Oct · From the public records
Being exploitedNot reportedNo attacks reported in the records
CISA known exploitedNot listedThe US list of flaws under attack
SeveritycriticalCVSS 9.8 of 10
FixNot yetSee what to do below
Am I affected?
The records do not list fixed versions yet. Check the vendor's advisory below.
What to do
- Apply the October 2026 hardening release from Cisco to your affected Unified Communications product as soon as possible.
- Consult Cisco's advisory for the list of affected products and specific version details.
- Verify that all Unified Communications components are updated to the fixed release.
- Monitor Cisco's security advisories for any additional updates or guidance.
What happened
- 27 OctCisco released a security hardening release for Unified Communications products addressing improper authentication vulnerabilities.
The record
| CVE | What it is | Severity | CISA listed | Exploit chance, 30 days |
|---|---|---|---|---|
| CVE-2026-76474 | Cisco Unified Communications Products Hardening Release: October 2026 - Improper Authentication Vulnerabilities | critical 9.8 | No | 0.5% |
Our reporting
We have not reported on it. It is here because the sources below did.
Reported elsewhere
Cisco · 27 OctCisco Unified Communications Products Security Hardening Release: October 2026 ↗The records
CVE-2026-76474 on NVD ↗Is anything you run affected?Members connect Zotpaper to their AI assistant. It checks your own project against every vulnerability on this page and the others we track, and says what to update.
How it works