CVE Tools
Track your stack

Cisco Confirms In-the-Wild Exploitation of Unified CM Vulnerability

SecurityWeekBy Ionut Arghire

Reported exploitedCisco Unified Communications Manager

Our summary

Cisco reports that CVE-2026-20230 has been exploited in the wild in Unified Communications Manager (Unified CM) and Unified Communications Manager Session Management Edition (Unified CM SME). The issue stems from improper validation of certain HTTP requests and could enable SSRF-style activity that may ultimately allow arbitrary file drops and potential root access. This matters because only devices with the WebDialer service enabled are affected (disabled by default), and Cisco advises upgrading to fixed releases to remediate.

Read at SecurityWeek

SecurityWeek publishes this story on its own site; we link to it rather than reprint it.

  1. BleepingComputerCisco finally confirms attackers exploiting Unified CM flawCVE-2026-20230
  2. Help Net SecurityWeek in review: Fortibleed campaign’s impact on orgs, Cisco Unified CM flaw exploitedCVE-2026-20230
  3. BleepingComputerCISA sets urgent deadline to fix Cisco flaw exploited in attacksCVE-2026-20230
  4. Daily CyberSecurity (securityonline.info)CISA Adds Cisco Unified CM and PTC Windchill Flaws to KEV CatalogCVE-2026-20230
  5. Dark ReadingIn Less Than 24 Hours, Attackers Weaponize Cisco CUCM FlawCVE-2026-20230
  6. SecurityWeekCisco SD-WAN Zero-Day Exploited Months Before PatchingCVE-2026-20230
  7. The Hacker NewsCisco Unified CM Flaw Exploited After PoC Reveals File-Write Path to RootCVE-2026-20230
  8. SecurityWeekHackers Exploiting Cisco Unified CM VulnerabilityCVE-2026-20230
  9. BleepingComputerCisco Unified CM flaw CVE-2026-20230 now exploited in attacksCVE-2026-20230
  10. Check Point Research8th June – Threat Intelligence ReportCVE-2026-20230

Worried this affects your company?

Discuss a security assessment of your internet-facing systems. Scope agreed before testing.

Check my exposure

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store