CVE-2026-20230: Cisco Unified Communications Manager Server-Side Request
Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability. Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) contain a server-side request forgery (SSRF) Vulnerability that could allow an unauthenticated, remote attacker to write files to the underlying operating system that could be used later to elevate to root.
- CISA KEV-listed (remediation due 2026-06-28)
- EPSS 83.2% (99.6% percentile)
- CVSS 8.6 high