# CVE-2026-76481: Cisco Unified Communications Products improper exception handling

Source: https://junglewise.ai/threats/cve-2026-76481-as-part-of-cisco-s-ongoing-commitment-to-proactive-security-and  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-10-21. Updated: 2026-10-21  
License: CC BY 4.0 with a link back

CVE-2026-76481 · Severity: high · CVSS 7.5 · Published 2026-10-21

Cisco's unified communications platforms—used for enterprise phone systems, messaging, and voice conferencing—contain multiple vulnerabilities stemming from improper handling of error conditions. An unauthenticated network attacker can exploit these flaws to achieve remote code execution, data breach, or service disruption across Emergency Responder, Prime Collaboration Deployment, Unified CM, and related products. These issues were discovered internally and are not currently known to be exploited in the wild.

Technologies: [Cisco Emergency Responder](https://junglewise.ai/threats/technologies/emergency-responder), [Cisco Prime Collaboration Deployment](https://junglewise.ai/threats/technologies/prime-collaboration-deployment), [Cisco Unified Communications Manager](https://junglewise.ai/threats/technologies/unified-communications-manager), [Cisco Unified Communications Manager IM & Presence Service](https://junglewise.ai/threats/technologies/unified-communications-manager-im-presence-service), [Cisco Unified Communications Manager Session Management Edition](https://junglewise.ai/threats/technologies/unified-communications-manager-session-management-edition), [Cisco Unity Connection](https://junglewise.ai/threats/technologies/unity-connection). Vendors: [Cisco](https://junglewise.ai/threats/vendors/cisco).

## Quick answers

**Is CVE-2026-76481 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-76481 being exploited in the wild.

**How severe is CVE-2026-76481?** High severity, with a CVSS score of 7.5, published 21 October 2026.

**Which products and versions are affected?** Cisco Emergency Responder; Cisco Prime Collaboration Deployment; Cisco Unified Communications Manager; Cisco Unified Communications Manager IM & Presence Service; and 2 more.

**Is there a fix for CVE-2026-76481?** Yes: fixed in Unified CM 15SU5; Emergency Responder, Prime Collaboration Deployment, Unified CM IM&P, Unified CM SME, and Unity Connection see advisory for product-specific fixed releases. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-76481 attacked?** It is attacked over the network, in a hosted service.

**Am I affected by CVE-2026-76481?** Check whether you run Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager or one of the others listed. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- Fixed in Unified CM 15SU5; Emergency Responder, Prime Collaboration Deployment, Unified CM IM&P, Unified CM SME, and Unity Connection see advisory for product-specific fixed releases

## Technical details

This advisory addresses multiple vulnerability classes (CWE-703, CWE-287, CWE-79, CWE-20, CWE-89, CWE-284, CWE-22, CWE-74) grouped under a single CVE-2026-76481 identifier for CWE-703 (improper exception handling). The issues affect multiple Cisco voice and collaboration products and are reachable over the network without authentication or user interaction. Fixes are available in Unified CM 15SU5 and later; release 14 is unpatched and requires migration.

## Affected products

- Cisco Emergency Responder
- Cisco Prime Collaboration Deployment
- Cisco Unified Communications Manager
- Cisco Unified Communications Manager IM & Presence Service
- Cisco Unified Communications Manager Session Management Edition
- Cisco Unity Connection

## Timeline

- 2026-10-21: disclosed

## References

- [https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-voice-hardening-twgbH9e3](https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-voice-hardening-twgbH9e3)

## Related threats

- [Cisco Unified Communications Manager cross-site scripting in web interface](https://junglewise.ai/threats/cve-2026-76419-a-vulnerability-in-the-web-based-management-interface-of-cisco)
- [Cisco Unified Communications Manager access control bypass](https://junglewise.ai/threats/cve-2026-76487-a-vulnerability-in-cisco-unified-communications-manager-unified)
- [Cisco Unified Communications Products path traversal in security hardening](https://junglewise.ai/threats/cve-2026-76479-as-part-of-cisco-s-ongoing-commitment-to-proactive-security-and)
- [Cisco Unified Communications Products improper access control](https://junglewise.ai/threats/cve-2026-76478-as-part-of-cisco-s-ongoing-commitment-to-proactive-security-and)
- [Cisco Unified Communications SQL injection in](https://junglewise.ai/threats/cve-2026-76477-as-part-of-cisco-s-ongoing-commitment-to-proactive-security-and)