Impact
CVE-2026-76481 covers vulnerabilities arising from improper handling of exceptional conditions in several Cisco Unified Communications products. The flaw may permit an attacker to trigger unexpected software states or crashes, potentially leading to denial of service or unpredictable behavior of the affected services. The CVE description does not specify a direct compromise of confidentiality or integrity, but it highlights that the issue was identified in internal security reviews and that hardening releases were issued to remediate it.
Affected Systems
The affected products are Cisco Emergency Responder, Cisco Unified Communications Manager, Cisco Unified Communications Manager IM and Presence Service, and Cisco Unity Connection. No specific version range is provided in the advisory, so administrators should verify the impact against their deployed releases.
Risk and Exploitability
With a CVSS score of 7.5 this vulnerability is considered high severity. The EPSS score is not available and the issue is not listed in the CISA KEV catalog, indicating that it has not yet been broadly exploited in the wild. The attack vector is not explicitly documented, so it is inferred that the vulnerability could be triggered by sending crafted data to the affected services or by invoking exceptional conditions internally. Given the lack of known public exploitation and the availability of a hardening patch, the immediate risk is moderate to high but can be mitigated by following the vendor's remediation steps.
OpenCVE Enrichment