All vulnerabilities
CVE-2026-76487

Cisco Unified Communications Manager Improper Access Control Vulnerability

Cisco Cisco Unified Communications ManagerNetwork & edge
Open in ThreatlineRecord JSON
CVSS
5.3Medium
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.50%Chance of exploitation activity in the next 30 days, higher than 42% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed inNone listedNo source names a fixed version. Check the vendor advisory below
Published21 Oct 2026Updated 22 Oct 2026CVE List

What fixes it

No source in this snapshot names a fixed version. The vendor advisories under References are the place to check.

Vendor and government advisories 1

Vendors that say their products are affected, and agencies that issued alerts. Check each for the fixed release of the product you run.

Reports 1

1 outlet mention it. Reports are not confirmation; each links to its source.

Description

A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an unauthenticated, remote attacker to conduct access control bypass attacks on an affected device.

This vulnerability is due to improper input validation for specific HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to access parts of the network that are beyond the scope of their intended access.

Text from CVE List

Affected versions 23

  • Cisco Unified Communications Manageraffected: 14CVE List
  • Cisco Unified Communications Manageraffected: 14SU1CVE List
  • Cisco Unified Communications Manageraffected: 14SU2CVE List
  • Cisco Unified Communications Manageraffected: 14SU3CVE List
  • Cisco Unified Communications Manageraffected: 15CVE List
  • Cisco Unified Communications Manageraffected: 15SU1CVE List
  • Cisco Unified Communications Manageraffected: 14SU4CVE List
  • Cisco Unified Communications Manageraffected: 14SU4aCVE List
  • Cisco Unified Communications Manageraffected: 15SU1aCVE List
  • Cisco Unified Communications Manageraffected: 15SU2CVE List
  • Cisco Unified Communications Manageraffected: 15.0.1.13010-1CVE List
  • Cisco Unified Communications Manageraffected: 15.0.1.13011-1CVE List
  • Cisco Unified Communications Manageraffected: 15.0.1.13012-1CVE List
  • Cisco Unified Communications Manageraffected: 15.0.1.13013-1CVE List
  • Cisco Unified Communications Manageraffected: 15.0.1.13014-1CVE List
  • Cisco Unified Communications Manageraffected: 15.0.1.13015-1CVE List
  • Cisco Unified Communications Manageraffected: 15.0.1.13016-1CVE List
  • Cisco Unified Communications Manageraffected: 15.0.1.13017-1CVE List
  • Cisco Unified Communications Manageraffected: 15SU3aCVE List
  • Cisco Unified Communications Manageraffected: 14SU5CVE List
  • Cisco Unified Communications Manageraffected: 15SU4CVE List
  • Cisco Unified Communications Manageraffected: 15SU4aCVE List
  • Cisco Unified Communications Manageraffected: 14SU6CVE List

References 1