CU
Product
Cisco Unity Connection
On CISA KEVExploited in the wild
17
CVEs
1
On KEV
9.8
Max CVSS
8
New 30D
Severity mix
Critical 4High 7Medium 6Low 0
Watch
Add Cisco Unity Connection to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-76478 New | 8.8 | Oct 21 | Cisco Unified Communications Products Hardening Release: October 2026 - Improper Access Control Vulnerabilities Affected: 14; 14SU1; 14SU2; 14SU3; 14SU3a; 15; +7 more |
| CVE-2026-76476 New | 8.8 | Oct 21 | Cisco Unified Communications Products Hardening Release: October 2026 - Improper Input Validation Vulnerabilities Affected: 14; 14SU1; 14SU2; 14SU3; 14SU3a; 15; +7 more |
| CVE-2026-76477 New | 8.8 | Oct 21 | Cisco Unified Communications Products Hardening Release: October 2026 - Injection Vulnerabilities Affected: 14; 14SU1; 14SU2; 14SU3; 14SU3a; 15; +7 more |
| CVE-2026-20034 | 8.8 | May 6 | Cisco Unity Connection Remote Code Execution Vulnerability Affected: 12.5(1); 12.5(1)SU1; 12.5(1)SU2; 12.5(1)SU3; 12.5(1)SU4; 14; +15 more |
| CVE-2026-76479 New | 7.8 | Oct 21 | Cisco Unified Communications Products Hardening Release: October 2026 - Path Traversal Vulnerabilities Affected: 14; 14SU1; 14SU2; 14SU3; 14SU3a; 15; +7 more |
| CVE-2026-76481 New | 7.5 | Oct 21 | Cisco Unified Communications Products Hardening Release: October 2026 - Improper Check or Handling of Exceptional Conditions Vulnerabilities Affected: 14; 14SU1; 14SU2; 14SU3; 14SU3a; 15; +7 more |
| CVE-2026-20035 | 7.2 | May 6 | Cisco Unity Connection Server-Side Request Forgery Vulnerability Affected: 12.5(1); 12.5(1)SU1; 12.5(1)SU2; 12.5(1)SU3; 12.5(1)SU4; 14; +15 more |
Showing 7
