CVE-2026-76487

A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an unauthenticated, remote attacker to conduct access control bypass attacks on an affected device. This vulnerability is due to improper input validation for specific HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to access parts of the network that are beyond the scope of their intended access.

CVSS v3 5.3 MEDIUM

5.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-access-PW9e8Jt2

Configurations

No configuration.

History

21 Oct 2026, 17:19

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-10-21 17:19

Updated : 2026-10-22 14:17

NVD link : CVE-2026-76487

Mitre link : CVE-2026-76487

CVE.ORG link : CVE-2026-76487

JSON object : View

Products Affected

No product.

CWE

CWE-749

Exposed Dangerous Method or Function

{"id": "CVE-2026-76487", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-76487", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-10-22T13:21:24.610490Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@cisco.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 3.9}]}, "affected": [{"source": "psirt@cisco.com", "affectedData": [{"vendor": "Cisco", "product": "Cisco Unified Communications Manager", "versions": [{"status": "affected", "version": "14"}, {"status": "affected", "version": "14SU1"}, {"status": "affected", "version": "14SU2"}, {"status": "affected", "version": "14SU3"}, {"status": "affected", "version": "15"}, {"status": "affected", "version": "15SU1"}, {"status": "affected", "version": "14SU4"}, {"status": "affected", "version": "14SU4a"}, {"status": "affected", "version": "15SU1a"}, {"status": "affected", "version": "15SU2"}, {"status": "affected", "version": "15.0.1.13010-1"}, {"status": "affected", "version": "15.0.1.13011-1"}, {"status": "affected", "version": "15.0.1.13012-1"}, {"status": "affected", "version": "15.0.1.13013-1"}, {"status": "affected", "version": "15.0.1.13014-1"}, {"status": "affected", "version": "15.0.1.13015-1"}, {"status": "affected", "version": "15.0.1.13016-1"}, {"status": "affected", "version": "15.0.1.13017-1"}, {"status": "affected", "version": "15SU3a"}, {"status": "affected", "version": "14SU5"}, {"status": "affected", "version": "15SU4"}, {"status": "affected", "version": "15SU4a"}, {"status": "affected", "version": "14SU6"}], "defaultStatus": "unknown"}]}], "published": "2026-10-21T17:19:08.047", "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-access-PW9e8Jt2", "source": "psirt@cisco.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "psirt@cisco.com", "description": [{"lang": "en", "value": "CWE-749"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an unauthenticated, remote attacker to conduct access control bypass attacks on an affected device.\r\n\r\nThis vulnerability is due to improper input validation for specific HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to access parts of the network that are beyond the scope of their intended access."}], "lastModified": "2026-10-22T14:17:46.920", "sourceIdentifier": "psirt@cisco.com"}