PT-2026-120699 · Cisco · Emergency Responder+5

CVE-2026-76479

·

Published

2026-10-21

·

Updated

2026-10-21

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Cisco Emergency Responder (affected versions not specified) Cisco Prime Collaboration Deployment (affected versions not specified) Cisco Unified Communications Manager (Unified CM) (affected versions not specified) Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) (affected versions not specified) Cisco Unified Communications Manager Session Management Edition (Unified CM SME) (affected versions not specified) Cisco Unity Connection (affected versions not specified)
Description Multiple issues exist involving the improper limitation of a pathname to a restricted directory. This is categorized as a path traversal issue, where an attacker could potentially access files or directories outside of the intended folder.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Path traversal

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-76479

Affected Products

Emergency Responder
Cisco Prime Collaboration Deployment
Cisco Unified Communications Manager
Cisco Unified Communications Manager Im & Presence Service
Cisco Unified Communications Manager Session Management Edition
Unity Connection