Skip to content
ThreatCluster

Cisco Unified Communications Manager XSS Vulnerability Advisory

First seen 6 Nov 2026, 12:14 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 6, 2026 at 12:15 UTC
  • •Cisco Unified CM and SME are vulnerable to XSS attacks due to improper input validation.
  • •No workarounds are available; immediate software updates are necessary.
  • •CVE-2026-76419 is the identifier for this critical vulnerability.

A cross-site scripting (XSS) vulnerability has been identified in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME). This flaw allows unauthenticated remote attackers to execute arbitrary script code by tricking users into clicking malicious links. Cisco has released software updates to address this vulnerability, but there are no workarounds available. The vulnerability affects all configurations of the affected products. The advisory includes details on the specific software releases that are vulnerable and those that have been fixed. The CVE associated with this vulnerability is CVE-2026-76419. Administrators are urged to apply the updates promptly to mitigate potential exploitation risks.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 4h ago How this analysis works

Timeline

2026-11-04
Cisco advisory published
Cisco disclosed a cross-site scripting vulnerability affecting Unified CM and SME, urging immediate updates.
Sec.Cloudapps.Cisco
2026-11-06
CVE-2026-76419 advisory updated
Cisco reiterated the XSS vulnerability details and confirmed the release of software updates to mitigate the risk.
sec.cloudapps.cisco.com

More articles in this cluster (2)

Following this threat?

Track CVE-2026-76419 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (5)

1 / 3

Common questions

Which Cisco products are affected?
The vulnerability affects Cisco Unified CM and Unified CM SME, regardless of device configuration.
What should I do to protect my systems?
Apply the available software updates released by Cisco immediately to mitigate the vulnerability.
Is there a workaround for this vulnerability?
No, there are no workarounds available; updating the software is the only solution.