CVE-2026-76475
Reported by cisco · Published October 21, 2026
As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unity Connection have conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76475 are related to issues concerning improper neutralization of input during web page generation that are grouped under the Common Weakness Enumeration (CWE) Base CWE-79.
Risk scores
Affected products
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Cisco Emergency Responder | 14, 14SU1, 14SU2 |
| Cisco | Cisco Unified Communications Manager | 14, 14SU1, 14SU2 |
| Cisco | Cisco Unified Communications Manager IM and Presence Service | 14, 14SU1, 14SU2 |
| Cisco | Cisco Unity Connection | 14, 14SU1, 14SU2 |
| Cisco | Cisco Unified Communications Manager IM and Presence Service | 14, 14SU1, 14SU2 |
| Cisco | Cisco Emergency Responder | 14SU6, 14, 14SU1 |
| Cisco | Cisco Unity Connection | 14SU1, 14SU2, 14SU3 |
| Cisco | Cisco Unified Communications Manager | 15, 15SU1, 14SU4 |
Timeline
- Oct 21, 2026 CVE Published
- Oct 22, 2026 EPSS Score (3 in total, the first dated here)
- Oct 22, 2026 Coalition ESS Score
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln CVE-2026-76475
vulnetix vdb fixes CVE-2026-76475Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/CVE-2026-76475/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart