# CVE-2026-76419: Cisco Unified Communications Manager cross-site scripting in web interface

Source: https://junglewise.ai/threats/cve-2026-76419-a-vulnerability-in-the-web-based-management-interface-of-cisco  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-11-04. Updated: 2026-11-04  
License: CC BY 4.0 with a link back

CVE-2026-76419 · Severity: medium · CVSS 6.1 · Published 2026-11-04

Cisco Unified Communications Manager and Session Management Edition are voice and communications platforms used by enterprises to manage phone systems and conferencing. An unauthenticated attacker can trick a user into clicking a malicious link to inject and execute JavaScript code in the management interface, potentially stealing session credentials or sensitive information displayed in the browser.

Technologies: [Cisco Unified Communications Manager](https://junglewise.ai/threats/technologies/unified-communications-manager), [Cisco Unified Communications Manager Session Management Edition](https://junglewise.ai/threats/technologies/unified-communications-manager-session-management-edition). Vendors: [Cisco](https://junglewise.ai/threats/vendors/cisco).

## Quick answers

**Is CVE-2026-76419 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-76419 being exploited in the wild.

**How severe is CVE-2026-76419?** Medium severity, with a CVSS score of 6.1, published 4 November 2026.

**Which products and versions are affected?** Cisco Unified Communications Manager 14; Cisco Unified Communications Manager Session Management Edition 15 prior to 15SU5.

**Is there a fix for CVE-2026-76419?** Yes: fixed in Cisco Unified CM and Unified CM SME 15SU5; Unified CM 14 requires migration to a fixed release. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-76419 attacked?** It is attacked over the network, in a hosted service.

**Am I affected by CVE-2026-76419?** Check whether you run Cisco Unified Communications Manager or Cisco Unified Communications Manager Session Management Edition at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- Fixed in Cisco Unified CM and Unified CM SME 15SU5; Unified CM 14 requires migration to a fixed release

## Technical details

A reflected cross-site scripting (XSS) vulnerability exists in the web-based management interface due to insufficient input validation. An unauthenticated, remote attacker can conduct the attack by crafting a malicious link and persuading a user to click it; successful exploitation allows arbitrary script execution in the context of the interface. Cisco has released fixed versions for both affected products.

## Affected products

- Cisco Unified Communications Manager 14
- Cisco Unified Communications Manager Session Management Edition 15 prior to 15SU5

## Timeline

- 2026-11-04: disclosed

## References

- [https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-xss-5mQn2U5z](https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-xss-5mQn2U5z)

## Related threats

- [Cisco Unified Communications Manager access control bypass](https://junglewise.ai/threats/cve-2026-76487-a-vulnerability-in-cisco-unified-communications-manager-unified)
- [Cisco Unified Communications Products improper exception handling](https://junglewise.ai/threats/cve-2026-76481-as-part-of-cisco-s-ongoing-commitment-to-proactive-security-and)
- [Cisco Unified Communications Products path traversal in security hardening](https://junglewise.ai/threats/cve-2026-76479-as-part-of-cisco-s-ongoing-commitment-to-proactive-security-and)
- [Cisco Unified Communications Products improper access control](https://junglewise.ai/threats/cve-2026-76478-as-part-of-cisco-s-ongoing-commitment-to-proactive-security-and)
- [Cisco Unified Communications SQL injection in](https://junglewise.ai/threats/cve-2026-76477-as-part-of-cisco-s-ongoing-commitment-to-proactive-security-and)