CISA Warns of Actively Exploited Cisco Unified CM Zero

Cyberpress • January 22, 2026

Share: View original

Tracked as CVE-2026-20045, the flaw enables attackers to execute arbitrary code on affected systems and escalate privileges to root level, ...

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

CISA Alerts on Exploited Cisco Unified CM Zero-Day Vulnerability CVE-2026-20045 The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent alert regarding the active exploitation of a zero-day remote code execution vulnerability in Cisco Unified Communications products, tracked as CVE-2026-20045. This flaw allows attackers to execute arbitrary code and escalate privileges to root level on affected systems. 3 sources 91

Extracted Entities

Attack Types (1)

Zero-day Exploit

CVEs (1)

Platforms (1)

Cisco Unified CM