CVE-2026-76476: cisco cisco emergency responder Improper Input Validation

Vulnerability summary

CVE-2026-76476 is a high (CVSS 8.8) Improper Input Validation vulnerability in cisco cisco emergency responder. EPSS estimates a 0.34% chance of exploitation in the next 30 days, higher than 25.9% of scored vulnerabilities.

Timeline

1. 21-10-2026
   PublishedVulnerability first disclosed.
2. 22-10-2026
   Last modifiedVulnerability information updated.

Description

As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unity Connection have conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76476 are related to issues concerning improper input validation that are grouped under the Common Weakness Enumeration (CWE) Class CWE-20.

• CWE-20Improper Input ValidationThe product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.