CVE-2026-76487
Awaiting Analysis Awaiting Analysis - Queue

Access Control Bypass in Cisco Unified Communications Manager

Publication date: 2026-10-21

Last updated on: 2026-10-22

Assigner: Cisco Systems, Inc.

Description
A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an unauthenticated, remote attacker to conduct access control bypass attacks on an affected device. This vulnerability is due to improper input validation for specific HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to access parts of the network that are beyond the scope of their intended access.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-21
Last Modified
2026-10-22
Generated
2026-11-10
AI Q&A
2026-10-22
EPSS Evaluated
2026-11-09
NVD
CVE-2026-76487
EUVD
EUVD-2026-107348

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-749 The product provides an Applications Programming Interface (API) or similar interface for interaction with external actors, but the interface includes a dangerous method or function that is not properly restricted.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-76487 is an improper access control vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME). It allows unauthenticated remote attackers to bypass access controls by sending crafted HTTP requests due to improper input validation.

Detection Guidance

Detecting this vulnerability requires monitoring for unusual HTTP requests targeting Cisco Unified Communications Manager. Check web server logs for crafted HTTP requests, especially those with unexpected parameters or malformed headers. Use network traffic analysis tools like Wireshark to inspect HTTP traffic for anomalies. Cisco's advisory recommends reviewing access logs for unauthorized access attempts to restricted areas.

Impact Analysis

A successful exploit could allow attackers to access parts of the network beyond their intended access, potentially leading to unauthorized data exposure or network compromise. This could result in data breaches or unauthorized system access.

Mitigation Strategies

Immediately upgrade to the fixed software versions provided by Cisco, such as 15SU5 for version 15. If upgrading is not immediately possible, isolate the affected systems from untrusted networks and restrict access to trusted IPs. Monitor for any signs of exploitation and apply Cisco's security patches as soon as they are available.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-76487. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...