Cisco Emergency Responder — authentication bypass.

WeaknessCWE-287: Authentication bypass

Published 21 Oct 2026, 17:19 UTCUpdated 22 Oct 2026, 23:19 UTCSource NVD

Read vendor advisory View on NVD

CVSS 3.1

9.8

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploit chance, 30 days

0.5%

Higher than 41% of all CVEs (EPSS)

Status

No known exploitation

Not in CISA KEV

Patch

Unknown

Check the vendor advisory

What happened

As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unity Connection have conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.

The vulnerabilities tracked by CVE-2026-76474 are related to issues concerning improper authentication that are grouped under the Common Weakness Enumeration (CWE) Class CWE-287.

What to do

01Check whether you run Cisco Emergency Responder, and which version.
02Follow the vendor advisory for a fix or a workaround.

References

Timeline · UTC

21 Oct 17:19Published to NVD
22 Oct 23:19NVD record updated

Also actively exploited

Vendor

Cisco23 CVEs in 30 days

All Cisco CVEs

Other CVEs in Cisco Emergency Responder

2 more CVEs

All Cisco Emergency Responder CVEs

9.3Cisco Emergency Responder — cross-site scripting.CVE-2026-76475Cisco Emergency Responder2 weeks agoEPSS 0.3%9.8Cisco Emergency Responder — injection.CVE-2026-76473Cisco Emergency Responder2 weeks agoEPSS 0.5%