Cisco addresses Unified Communications vulnerability as active exploitation underway

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Cisco Addresses Critical CVE-2026-20045 Vulnerability Amid Active Exploitation Cisco has identified a critical remote code execution vulnerability, CVE-2026-20045, in its Unified Communications software. The US cyber agency has added this vulnerability to its Known Exploited Vulnerabilities (KEV) catalogue, indicating active exploitation is underway. Organizations using Cisco's Unified Communications are advised to take immediate action to mitigate risks. 2 sources 26