Cisco Unified CM and Unified CM SME improper access control flaw (CVE-2026-76487) allows unauthenticated remote bypass
Cisco disclosed CVE-2026-76487, an improper access control vulnerability in Cisco Unified Communications Manager (Unified CM) and Unified CM Session Management Edition (Unified CM SME). An unauthenticated, remote attacker could send a crafted HTTP request to an affected device and bypass access controls. A successful exploit could give th…