CVE-2026-76475criticalCWE-79

CVE-2026-76475: falha crítica em Cisco Emergency Responder

Cisco Unified Communications Products Hardening Release: October 2026 - Cross-site Scripting Vulnerabilities

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Cisco Unified Communications Manager+ Monitorar Cisco Unity Connection

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Ela tem alerta oficial do governo brasileiro.

ssvc Trackcvss 9.3epss 0.3%
da publicação à arma6 dias
Publicada no NVD21 de out.
1ª PoC+6d
Alerta oficial no Brasil

O governo federal publicou alerta, recomendação ou boletim que cita esta vulnerabilidade.

Fonte: CTIR Gov (GSI) e CISC Gov.br, sob licença CC BY-ND 3.0.
As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unity Connection have conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76475 are related to issues concerning improper neutralization of input during web page generation that are grouped under the Common Weakness Enumeration (CWE) Base CWE-79.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N
Produtos afetados
Cisco · Cisco Emergency ResponderCisco · Cisco Unified Communications ManagerCisco · Cisco Unified Communications Manager IM and Presence ServiceCisco · Cisco Unity Connection
⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
CVEs relacionadas — Cisco Emergency Responder

No mesmo produto, das mais perigosas para as menos.

CVE-2026-20230HIGHCisco Unified Communications Manager Server-Side Request Forgery VulnerabilityEPSS 88.5%KEVCVE-2026-20045HIGHCisco Unified Communications Products Remote Code Execution VulnerabilityEPSS 4.5%KEVCVE-2020-3177HIGHCisco Unified Communications Manager Path Traversal VulnerabilityEPSS 2.8%CVE-2023-20101CRITICALCVE-2023-20101EPSS 2.6%CVE-2019-1837MEDIUMCisco Unified Communications Manager Denial of Service VulnerabilityEPSS 2.4%CVE-2024-20253CRITICALCVE-2024-20253EPSS 2.4%