{"id":"CVE-2026-76419","kind":"vulnerability","aliases":["CVE-2026-76419"],"related":[],"title":"Cisco Unified CM: web interface flaw lets attackers run scripts in browsers","description":"A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface.\r\n\r\nThis vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.","summary":"The web management interface of Cisco Unified Communications Manager and Unified CM SME does not validate user input properly. An attacker who tricks a user into clicking a crafted link can run script in that user's browser and read browser-based information.","severity":"medium","cvss":6.1,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["cisco","self-hosted","unified-cm","vendor","voip"],"not_affected_if":["auth-required"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-04T17:17:36+00:00","first_seen_at":"2026-11-04T17:28:12+00:00","triaged_at":"2026-11-04T17:28:46+00:00","updated_at":"2026-11-04T17:28:46+00:00","category":"vendor","confidence":0.6,"triage":{"at":"2026-11-04T17:28:46Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"internet","title":"Cisco Unified CM: web interface flaw lets attackers run scripts in browsers","impact":"medium","summary":"The web management interface of Cisco Unified Communications Manager and Unified CM SME does not validate user input properly. An attacker who tricks a user into clicking a crafted link can run script in that user's browser and read browser-based information.","audience":"businesses","category":"vendor","nicknames":[],"who_cares":["cisco","unified-cm","voip","self-hosted"],"confidence":0.6,"fix_status":"unknown","needs_auth":"no","worst_case":"Attacker runs script as an admin user and reads browser data","analyst_note":"Check Cisco's security advisory for affected and fixed versions of Unified CM and Unified CM SME; the NVD entry alone does not give them.","how_to_check":"unknown","plain_action":"","needs_analyst":true,"not_affected_if":["auth-required"],"who_is_affected":"Organizations running Cisco Unified Communications Manager or Unified CM Session Management Edition with the web-based management interface reachable by staff. The sources do not state affected versions or which configurations are exposed. unknown for anything beyond that.","user_interaction":"yes","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000654,"input_tokens":4244,"output_tokens":460,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':14A,17A '-76419':15A,18A 'access':176C 'affect':173C 'allow':100C,160C 'arbitrari':165C 'attack':8A,48B,104C,113C,139C,162C 'base':70B,78C,127C,180C 'browser':12A,65B,69B,179C 'browser-bas':68B,178C 'cisco':1A,19B,33B,82C,89C 'click':54B,152C 'cm':3A,25B,39B,87C,97C 'code':167C 'communic':35B,84C,91C 'conduct':106C 'context':170C 'could':99C,140C,159C 'craft':56B,154C 'cross':109C 'cross-sit':108C 'cve':13A,16A 'edit':95C 'execut':164C 'exist':122C 'exploit':141C,158C 'flaw':6A 'host':22B 'inform':71B,181C 'input':45B,137C 'interfac':5A,31B,80C,119C,129C,150C,174C 'let':7A 'link':57B,155C 'manag':30B,36B,79C,85C,92C,94C,128C 'persuad':145C 'proper':46B,132C 'read':67B 'remot':103C 'run':9A,59B 'script':10A,60B,111C,166C 'self':21B 'self-host':20B 'sensit':177C 'session':93C 'site':110C 'sme':40B,98C 'success':157C 'suppli':136C 'trick':50B 'unauthent':102C 'unifi':2A,24B,34B,38B,83C,86C,90C,96C 'unified-cm':23B 'user':44B,52B,63B,116C,135C,147C 'user-suppli':134C 'valid':43B,133C 'vendor':26B 'voip':27B 'vulner':73C,121C,143C 'web':4A,29B,77C,126C 'web-bas':76C,125C 'xss':112C","nicknames":[],"mitigations":[],"who_affected":"Organizations running Cisco Unified Communications Manager or Unified CM Session Management Edition with the web-based management interface reachable by staff. The sources do not state affected versions or which configurations are exposed. unknown for anything beyond that.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["cisco","medium","selfhosted","unifiedcm","vendor","voip"],"campaign_type":null,"first_public_at":"2026-11-04T17:17:36+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss_by":"psirt@cisco.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-76419","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-76419","severity":null,"published_at":"2026-11-04T17:17:36+00:00","modified_at":"2026-11-04T17:17:36+00:00","first_seen_at":"2026-11-04T17:28:12+00:00","fetched_at":"2026-11-04T17:28:12+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}