CVE-2026-76475criticalCWE-79

CVE-2026-76475: fallo crítico en Cisco Emergency Responder

Cisco Unified Communications Products Hardening Release: October 2026 - Cross-site Scripting Vulnerabilities

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear Cisco Unified Communications Manager+ Monitorear Cisco Unity Connection

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

28Vexday Risk Score

Sin señal de explotación. Ella tiene alerta oficial del gobierno de Brasil.

ssvc Trackcvss 9.3epss 0.3%
de la publicación al arma6 días
Publicada en NVD21 oct
1ª PoC+6d
Alerta oficial en Brasil

El gobierno federal de Brasil publicó una alerta, recomendación o boletín que cita esta vulnerabilidad.

Fuente: CTIR Gov (GSI) y CISC Gov.br, bajo licencia CC BY-ND 3.0.
As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unity Connection have conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76475 are related to issues concerning improper neutralization of input during web page generation that are grouped under the Common Weakness Enumeration (CWE) Base CWE-79.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N
Productos afectados
Cisco · Cisco Emergency ResponderCisco · Cisco Unified Communications ManagerCisco · Cisco Unified Communications Manager IM and Presence ServiceCisco · Cisco Unity Connection
⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
CVEs relacionadas — Cisco Emergency Responder

En el mismo producto, de las más peligrosas a las menos.

CVE-2026-20230HIGHCisco Unified Communications Manager Server-Side Request Forgery VulnerabilityEPSS 88.5%KEVCVE-2026-20045HIGHCisco Unified Communications Products Remote Code Execution VulnerabilityEPSS 4.5%KEVCVE-2020-3177HIGHCisco Unified Communications Manager Path Traversal VulnerabilityEPSS 2.8%CVE-2023-20101CRITICALCVE-2023-20101EPSS 2.6%CVE-2019-1837MEDIUMCisco Unified Communications Manager Denial of Service VulnerabilityEPSS 2.4%CVE-2024-20253CRITICALCVE-2024-20253EPSS 2.4%