Is CVE-2026-76473 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-76473 being exploited in the wild.

How severe is CVE-2026-76473?

Critical severity, with a CVSS score of 9.8, published 21 October 2026.

Which products and versions are affected?

Cisco Emergency Responder Release 14 and earlier; Cisco Prime Collaboration Deployment Release 14 and earlier; Cisco Unified Communications Manager Release 14 and earlier; Cisco Unified Communications Manager IM & Presence Service Release 14 and earlier; and 2 more.

Is there a fix for CVE-2026-76473?

Yes: fixed in Release 15 Update 5 and later for all affected products. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-76473 attacked?

It is attacked over the network, in a hosted service.

Am I affected by CVE-2026-76473?

Check whether you run Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-76473: Cisco Unified Communications products resource lifecycle control

CVE-2026-76473 · Severity: critical · CVSS 9.8 · Published 2026-10-21

Cisco's internal security review discovered multiple critical vulnerabilities across its voice communication and collaboration products, including Emergency Responder, Prime Collaboration Deployment, Unified Communications Manager, and Unity Connection. An unauthenticated attacker on the network could exploit these flaws to gain complete control over affected systems, including confidentiality, integrity, and availability compromise. No workarounds are available; affected customers must upgrade to patched releases immediately.

Technologies: Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager, Cisco Unified Communications Manager IM & Presence Service, Cisco Unified Communications Manager Session Management Edition, Cisco Unity Connection. Vendors: Cisco.

Quick answers

Is CVE-2026-76473 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-76473 being exploited in the wild.
How severe is CVE-2026-76473?: Critical severity, with a CVSS score of 9.8, published 21 October 2026.
Which products and versions are affected?: Cisco Emergency Responder Release 14 and earlier; Cisco Prime Collaboration Deployment Release 14 and earlier; Cisco Unified Communications Manager Release 14 and earlier; Cisco Unified Communications Manager IM & Presence Service Release 14 and earlier; and 2 more.
Is there a fix for CVE-2026-76473?: Yes: fixed in Release 15 Update 5 and later for all affected products. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-76473 attacked?: It is attacked over the network, in a hosted service.
Am I affected by CVE-2026-76473?: Check whether you run Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

Fixed in: Release 15 Update 5 and later for all affected products

Technical details

This advisory groups multiple internally discovered vulnerabilities (CVE-2026-76473 through CVE-2026-76481) across eight distinct weakness classes including improper resource control (CWE-74), authentication bypass (CWE-287), injection flaws (CWE-89), and access control issues (CWE-284). The vulnerabilities are remotely exploitable without authentication or user interaction (CVSS 9.8 base score). Patches are available in Release 15 Update 5 and later; Release 14 is end-of-life with no fix provided.

Affected products

Cisco Emergency Responder Release 14 and earlier
Cisco Prime Collaboration Deployment Release 14 and earlier
Cisco Unified Communications Manager Release 14 and earlier
Cisco Unified Communications Manager IM & Presence Service Release 14 and earlier
Cisco Unified Communications Manager Session Management Edition Release 14 and earlier
Cisco Unity Connection Release 14 and earlier

Timeline

2026-10-21: disclosed
2026-10-21: advisory

References

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-voice-hardening-twgbH9e3

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.