CVE-2026-76481: Cisco Unified Communications Products Hardening Release: October 2026 - Improper Check or Handling of Exceptional Conditions Vulnerabilities
As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unity Connection have conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76481 are related to issues concerning improper handling of exceptional conditions that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-703.
Affected Software
Event History
Frequently Asked Questions
Which deployments are in scope?
The advisory identifies Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager, Unified CM IM & Presence Service, Unified CM Session Management Edition, and Cisco Unity Connection.
What level of attacker access is indicated by the severity vector?
The vector indicates network-reachable exploitation with low attack complexity, no required privileges, and no user interaction. The stated impact is availability only; confidentiality and integrity impacts are listed as none.
Are affected versions, default exposure, or temporary mitigations provided?
No affected version ranges, default-configuration details, or mitigation steps are included in the provided information. The described remediation is through Cisco software hardening releases.