CVE-2026-76474
Reported by cisco · Published October 21, 2026
As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unity Connection have conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76474 are related to issues concerning improper authentication that are grouped under the Common Weakness Enumeration (CWE) Class CWE-287.
Risk scores
Affected products
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Cisco Emergency Responder | 14, 14SU1, 14SU2 |
| Cisco | Cisco Unified Communications Manager | 14, 14SU1, 14SU2 |
| Cisco | Cisco Unified Communications Manager IM and Presence Service | 14, 14SU1, 14SU2 |
| Cisco | Cisco Unity Connection | 14, 14SU1, 14SU2 |
| Cisco | Cisco Emergency Responder | 15SU4, 14SU5, 15SU3 |
| Cisco | Cisco Unified Communications Manager IM and Presence Service | 14, 14SU1, 14SU2 |
| Cisco | Cisco Unity Connection | 14SU1, 14SU2, 14SU3 |
| Cisco | Cisco Unified Communications Manager | 15SU2, 15SU1a, 14SU4a |
Timeline
- Oct 21, 2026 CVE Published
- Oct 22, 2026 EPSS Score (4 in total, the first dated here)
- Oct 22, 2026 Coalition ESS Score
- Oct 22, 2026 CVE Updated
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln CVE-2026-76474
vulnetix vdb fixes CVE-2026-76474Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/CVE-2026-76474/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart