CiscoAnalysisCisco releases security hardening updates for Unified Communications Manager
What happened.Cisco issued security advisory cisco-sa-voice-hardening-twgbH9e3 detailing multiple critical vulnerabilities resolved across its voice and collaboration platforms.
Why it matters.Unified communications gateways handle core enterprise telephony, internal directory routing, and session signaling. Unauthenticated command injection in central call-processing infrastructure allows intruders to manipulate call paths and eavesdrop on private sessions. Infrastructure teams must deploy vendor hardening builds and restrict management interfaces to isolated administrative virtual networks.
The technical specifications:
- Vulnerability mechanics: Tracked under grouped identifiers including CVE-2026-76473 and CVE-2026-76474 with 9.8 CVSS scores, the flaws involve downstream command injection and authentication bypass during request handling.
- Affected infrastructure: The defects compromise Cisco Unified Communications Manager, Emergency Responder, Prime Collaboration Deployment, and Unity Connection gateways.
- Remediation releases: Cisco issued software hardening releases across supported version branches, confirming that no configuration workarounds exist for the reported vulnerabilities.