Skip to content
fr Sign in
5.3 Medium

CVE-2026-76487 A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session…

Description

A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an unauthenticated, remote attacker to conduct access control bypass attacks on an affected device. This vulnerability is due to improper input validation for specific HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to access parts of the network that are beyond the scope of their intended access.

Affected products and versions

Product Affected versions Fixed in
Cisco Unified Communications Manager 15.0 15.0.1.13010-1 → 15.0.1.13017-1 No fix stated
Cisco Unified Communications Manager 15 15SU1a → 15 No fix stated
Cisco Unified Communications Manager 14 14SU1 → 14 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Cisco Unified Communications Manager

The 62 CVEs of Cisco Unified Communications Manager →
CVE-2026-76419 Cisco Unified Communications Manager Cross-Site Scripting Vulnerability 6.1 Medium CVE-2026-76481 As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency… 7.5 High CVE-2026-76479 As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency… 7.8 High CVE-2026-76478 As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency… 8.8 High
Track this CVE