CVE-2026-76473

Summary

Improper control of a resource through its lifetime (CWE-74) in multiple Cisco Unified Communications products allows unauthenticated remote attackers to potentially compromise confidentiality, integrity, and availability.

Exploitability

Exploitation is likely straightforward due to network accessibility (AV:N), no authentication required (PR:N), and no user interaction (UI:N), though specific technical details are not disclosed.

Blast radius

Successful exploitation could lead to full system compromise including data exfiltration, unauthorized modification, and service disruption across affected Unified Communications platforms.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to the fixed software versions specified in Cisco Security Advisory cisco-sa-cucm-prim-coll-dep-cwe74-20260723; exact patch levels are not provided in the description, so apply the latest security hardening release per Cisco's advisory.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.