{"id":"CVE-2026-76473","revision":"725eeec3749a43be841b897f2ab1d17d","records":[{"revision":"725eeec3749a43be841b897f2ab1d17d","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-76473","aliases":[],"title":"Cisco Unified Communications Products Hardening Release: October 2026 - Improper control of a resource through its lifetime.","description":"As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unity Connection have conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.\r\n\r\nThe vulnerabilities tracked by CVE-2026-76473 are related to issues concerning improper control of a resource through its lifetime that are grouped under the Common Weakness Enumeration (CWE) Class CWE-74.\r\n ","state":0,"publishedAt":"2026-10-21T16:14:31.067+00:00","modifiedAt":"2026-10-22T23:04:31.612+00:00","affected":[{"ecosystem":"Vendor product","name":"Cisco Emergency Responder","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Cisco\",\n                    \"product\": \"Cisco Emergency Responder\",\n                    \"versions\": [\n                        {\n                            \"version\": \"14\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"14SU1\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"14SU2\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"14SU3\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"14SU3a\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"15\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"15SU1\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"15SU1a\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"14SU4\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"15SU2\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"15SU3\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"14SU5\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"15SU4\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"14SU6\",\n                            \"status\": \"affected\"\n                        }\n                    ],\n                    \"defaultStatus\": \"unknown\"\n                }"},{"ecosystem":"Vendor product","name":"Cisco Unified Communications Manager","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Cisco\",\n                    \"product\": \"Cisco Unified Communications Manager\",\n                    \"versions\": [\n                        {\n                            \"version\": \"14\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"14SU1\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"14SU2\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"14SU3\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"15\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"15SU1\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"14SU4\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"14SU4a\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"15SU1a\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"15SU2\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"15.0.1.13010-1\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"15.0.1.13011-1\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"15.0.1.13012-1\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"15.0.1.13013-1\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"15.0.1.13014-1\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"15.0.1.13015-1\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"15.0.1.13016-1\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"15.0.1.13017-1\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"15SU3a\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"14SU5\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"15SU4\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"15SU4a\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"14SU6\",\n                            \"status\": \"affected\"\n                        }\n                    ],\n                    \"defaultStatus\": \"unknown\"\n                }"},{"ecosystem":"Vendor product","name":"Cisco Unified Communications Manager IM and Presence Service","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Cisco\",\n                    \"product\": \"Cisco Unified Communications Manager IM and Presence Service\",\n                    \"versions\": [\n                        {\n                            \"version\": \"14\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"14SU1\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"14SU2\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"14SU2a\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"14SU3\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"15\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"15SU1\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"14SU4\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"15SU2\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"15SU3\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"14SU5\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"15SU4\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"14SU6\",\n                            \"status\": \"affected\"\n                        }\n                    ],\n                    \"defaultStatus\": \"unknown\"\n                }"},{"ecosystem":"Vendor product","name":"Cisco Unity Connection","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Cisco\",\n                    \"product\": \"Cisco Unity Connection\",\n                    \"versions\": [\n                        {\n                            \"version\": \"14\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"14SU1\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"14SU2\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"14SU3\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"14SU3a\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"15\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"15SU1\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"14SU4\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"15SU2\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"15SU3\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"14SU5\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"15SU4\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"14SU6\",\n                            \"status\": \"affected\"\n                        }\n                    ],\n                    \"defaultStatus\": \"unknown\"\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","score":9.8,"severity":"CRITICAL"}],"references":["https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-voice-hardening-twgbH9e3"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-76473","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-76473","identifiers":["CVE-2026-76473"]},"retained":false,"historicalAffected":[]}],"coverage":[]}