{"api_version":"1","generated_at":"2026-10-22T16:06:08+00:00","cve":"CVE-2026-76487","urls":{"html":"https://cve.report/CVE-2026-76487","api":"https://cve.report/api/cve/CVE-2026-76487.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2026-76487","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-76487"},"summary":{"title":"Cisco Unified Communications Manager Improper Access Control Vulnerability","description":"A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an unauthenticated, remote attacker to conduct access control bypass attacks on an affected device.\r\n\r\nThis vulnerability is due to improper input validation for specific HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to access parts of the network that are beyond the scope of their intended access.","state":"PUBLISHED","assigner":"cisco","published_at":"2026-10-21 17:19:08","updated_at":"2026-10-22 14:17:46"},"problem_types":["CWE-749","CWE-749 Exposed Dangerous Method or Function"],"metrics":[{"version":"3.1","source":"psirt@cisco.com","type":"Secondary","score":"5.3","severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","data":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"}},{"version":"3.1","source":"CNA","type":"CVSSV3_1","score":"5.3","severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","data":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","version":"3.1"}}],"references":[{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-access-PW9e8Jt2","name":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-access-PW9e8Jt2","refsource":"psirt@cisco.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-76487","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-76487","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"Cisco","product":"Cisco Unified Communications Manager","version":"affected 14","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Unified Communications Manager","version":"affected 14SU1","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Unified Communications Manager","version":"affected 14SU2","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Unified Communications Manager","version":"affected 14SU3","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Unified Communications Manager","version":"affected 15","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Unified Communications Manager","version":"affected 15SU1","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Unified Communications Manager","version":"affected 14SU4","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Unified Communications Manager","version":"affected 14SU4a","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Unified Communications Manager","version":"affected 15SU1a","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Unified Communications Manager","version":"affected 15SU2","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Unified Communications Manager","version":"affected 15.0.1.13010-1","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Unified Communications Manager","version":"affected 15.0.1.13011-1","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Unified Communications Manager","version":"affected 15.0.1.13012-1","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Unified Communications Manager","version":"affected 15.0.1.13013-1","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Unified Communications Manager","version":"affected 15.0.1.13014-1","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Unified Communications Manager","version":"affected 15.0.1.13015-1","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Unified Communications Manager","version":"affected 15.0.1.13016-1","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Unified Communications Manager","version":"affected 15.0.1.13017-1","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Unified Communications Manager","version":"affected 15SU3a","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Unified Communications Manager","version":"affected 14SU5","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Unified Communications Manager","version":"affected 15SU4","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Unified Communications Manager","version":"affected 15SU4a","platforms":[]},{"source":"CNA","vendor":"Cisco","product":"Cisco Unified Communications Manager","version":"affected 14SU6","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[{"source":"CNA","title":"","value":"The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory.","time":"","lang":"en"}],"credits":[],"nvd_cpes":[],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"metrics":[{"other":{"content":{"id":"CVE-2026-76487","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-10-22T13:21:24.610490Z","version":"2.0.3"},"type":"ssvc"}}],"providerMetadata":{"dateUpdated":"2026-10-22T13:37:53.516Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"title":"CISA ADP Vulnrichment"}],"cna":{"affected":[{"defaultStatus":"unknown","product":"Cisco Unified Communications Manager","vendor":"Cisco","versions":[{"status":"affected","version":"14"},{"status":"affected","version":"14SU1"},{"status":"affected","version":"14SU2"},{"status":"affected","version":"14SU3"},{"status":"affected","version":"15"},{"status":"affected","version":"15SU1"},{"status":"affected","version":"14SU4"},{"status":"affected","version":"14SU4a"},{"status":"affected","version":"15SU1a"},{"status":"affected","version":"15SU2"},{"status":"affected","version":"15.0.1.13010-1"},{"status":"affected","version":"15.0.1.13011-1"},{"status":"affected","version":"15.0.1.13012-1"},{"status":"affected","version":"15.0.1.13013-1"},{"status":"affected","version":"15.0.1.13014-1"},{"status":"affected","version":"15.0.1.13015-1"},{"status":"affected","version":"15.0.1.13016-1"},{"status":"affected","version":"15.0.1.13017-1"},{"status":"affected","version":"15SU3a"},{"status":"affected","version":"14SU5"},{"status":"affected","version":"15SU4"},{"status":"affected","version":"15SU4a"},{"status":"affected","version":"14SU6"}]}],"descriptions":[{"lang":"en","value":"A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an unauthenticated, remote attacker to conduct access control bypass attacks on an affected device.\r\n\r\nThis vulnerability is due to improper input validation for specific HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to access parts of the network that are beyond the scope of their intended access."}],"exploits":[{"lang":"en","value":"The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","version":"3.1"},"format":"cvssV3_1"}],"problemTypes":[{"descriptions":[{"cweId":"CWE-749","description":"Exposed Dangerous Method or Function","lang":"en","type":"cwe"}]}],"providerMetadata":{"dateUpdated":"2026-10-21T16:16:54.579Z","orgId":"d1c1063e-7a18-46af-9102-31f8928bc633","shortName":"cisco"},"references":[{"name":"cisco-sa-cucm-access-PW9e8Jt2","url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-access-PW9e8Jt2"}],"source":{"advisory":"cisco-sa-cucm-access-PW9e8Jt2","defects":["CSCwv00936"],"discovery":"EXTERNAL"},"title":"Cisco Unified Communications Manager Improper Access Control Vulnerability"}},"cveMetadata":{"assignerOrgId":"d1c1063e-7a18-46af-9102-31f8928bc633","assignerShortName":"cisco","cveId":"CVE-2026-76487","datePublished":"2026-10-21T16:16:54.579Z","dateReserved":"2026-08-19T12:02:03.639Z","dateUpdated":"2026-10-22T13:37:53.516Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"nvd":{"publishedDate":"2026-10-21 17:19:08","lastModifiedDate":"2026-10-22 14:17:46","problem_types":["CWE-749","CWE-749 Exposed Dangerous Method or Function"],"metrics":{"cvssMetricV31":[{"source":"psirt@cisco.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-10-22T13:21:24.610490Z","id":"CVE-2026-76487","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"configurations":[]},"legacy_mitre":{"record":{"CveYear":"2026","CveId":"76487","Ordinal":"1","Title":"Cisco Unified Communications Manager Improper Access Control Vul","CVE":"CVE-2026-76487","Year":"2026"},"notes":[{"CveYear":"2026","CveId":"76487","Ordinal":"1","NoteData":"A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an unauthenticated, remote attacker to conduct access control bypass attacks on an affected device.\r\n\r\nThis vulnerability is due to improper input validation for specific HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to access parts of the network that are beyond the scope of their intended access.","Type":"Description","Title":"Cisco Unified Communications Manager Improper Access Control Vul"}]}}}