PT-2026-120694 · Cisco · Cisco Prime Collaboration Deployment+5
CVE-2026-76474
·
Published
2026-10-21
·
Updated
2026-10-22
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Cisco Emergency Responder (affected versions not specified)
Cisco Prime Collaboration Deployment (affected versions not specified)
Cisco Unified Communications Manager (Unified CM) (affected versions not specified)
Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) (affected versions not specified)
Cisco Unified Communications Manager Session Management Edition (Unified CM SME) (affected versions not specified)
Cisco Unity Connection (affected versions not specified)
Description
Multiple issues concerning improper authentication were identified during an internal security review. These issues fall under the Common Weakness Enumeration (CWE) Class CWE-287, which refers to a failure to properly verify the identity of a user, device, or other entity.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Improper Authentication
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Emergency Responder
Cisco Prime Collaboration Deployment
Cisco Unified Communications Manager
Cisco Unified Communications Manager Im & Presence Service
Cisco Unified Communications Manager Session Management Edition
Unity Connection