Public preview. Built from real public data on November 9, 2026, 5:41 AM UTC.
Securidigm Watch Transportation cyber intel
Home / Items
VulnerabilitySeverity 6.1 medium

Cisco Unified Communications Manager Cross-Site Scripting Vulnerability

CVE-2026-76419 · CVE Program · November 4, 2026

Summary

A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. This vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.

From CVE record (written by the reporting organization), quoted as published. Check the source before acting.

Affected products

VendorProductAffected versionsFixed
CiscoCisco Unified Communications Manager14, 14SU1, 14SU2, 14SU3, 15, 15SU1, 14SU4, 14SU4a, 15SU1a, 15SU2, 15.0.1.13010-1, 15.0.1.13011-1, 15.0.1.13012-1, 15.0.1.13013-1, 15.0.1.13014-1, 15.0.1.13015-1, 15.0.1.13016-1, 15.0.1.13017-1, 15SU3a, 14SU5—

Why it's on these mode pages

  • Maritime: Vendor table: Cisco (network and remote-access gear used in every mode, all modes) (matched by rule)
  • Pipeline: Vendor table: Cisco (network and remote-access gear used in every mode, all modes) (matched by rule)
  • Freight rail: Vendor table: Cisco (network and remote-access gear used in every mode, all modes) (matched by rule)
  • Passenger rail and transit: Vendor table: Cisco (network and remote-access gear used in every mode, all modes) (matched by rule)
  • Highway and motor carrier: Vendor table: Cisco (network and remote-access gear used in every mode, all modes) (matched by rule)
  • Postal and parcel: Vendor table: Cisco (network and remote-access gear used in every mode, all modes) (matched by rule)

Change history

  1. November 9, 2026: First collected by Watch

Securidigm Scout can match advisories like this one to the equipment on your own network, offline. securidigm.com