CVE-2026-76487

MediumCVSS 5.3/10Last modified Oct 22, 2026

Description

A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an unauthenticated, remote attacker to conduct access control bypass attacks on an affected device. This vulnerability is due to improper input validation for specific HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to access parts of the network that are beyond the scope of their intended access.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-749

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Oct 21, 2026
Last modified
Oct 22, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-764886.5A vulnerability in the export policies functionality of Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticatCVE-2026-764895.8Multiple Cisco products are affected by a vulnerability in the memory management implementation of Snort 3 that could allow an unauthenticatCVE-2026-76497.5The ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup plugin for WordPress is vulnerable to time-CVE-2026-764908.6As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has cCVE-2026-764917.5As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has cCVE-2026-764927.5As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has cCVE-2026-764937.5As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has cCVE-2026-764947.8As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has cCVE-2026-764957.8As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has cCVE-2026-764967.0As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has cCVE-2026-764976.6As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has cCVE-2026-764989.8As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Application Policy Infrastructure Controller (API
CVE-2026-76487: Medium severity, CVSS 5.3 | Vulnix