Security1 hOctober 25, 2026, 09:01

Cisco patches nine Unified CM flaws, two rated 9.8

Cisco published two advisories on 21 October 2026 covering nine vulnerabilities in Unified Communications Manager and related voice products. Release 15SU5 fixes all of them, while release 14 users must migrate; no workaround exists. ZoomEye found 5,002 Unified CM instances exposed online.

DEV Community

Open source

Cisco patches nine Unified CM flaws, two rated 9.8

CVE-2026-76473 and CVE-2026-76474 are rated 9.8
CVE-2026-76475 (XSS) scores 9.3; five more range from 7.5 to 8.8
IM&P, SME, Unity Connection, Emergency Responder and PCD are affected
ZoomEye counted 5,002 Unified CM instances, patch level unknown

#Cisco#UnifiedCM#ZoomEye

Cisco patches critical NX-API flaw CVE-2026-76471 rated 9.8

Security

Cisco Patches 18 CVEs, Including Three 9.8-Rated RCE Flaws in NX-OS

Security

CVE-2026-108474 in JetBrains Exposed: SQL injection rated CVSS 9.8

Security

Cisco patches nine Unified CM flaws, two rated 9.8

Cisco patches critical NX-API flaw CVE-2026-76471 rated 9.8

Cisco Patches 18 CVEs, Including Three 9.8-Rated RCE Flaws in NX-OS

CVE-2026-108474 in JetBrains Exposed: SQL injection rated CVSS 9.8

Three Langflow flaws rated CVSS 9.8 allow unauthenticated RCE