Back Securityaffairs.Co

Cisco fixed actively exploited Unified Communications zero day

Securityaffairs.Co •Pierluigi Paganini • January 21, 2026

Cisco patched a critical zero-day RCE flaw (CVE-2026-20045) in Unified Communications and Webex Calling that is actively exploited in the wild. Cisco patched a critical zero-day remote code execution flaw, tracked as CVE-2026-20045 (CVSS score of 8.2), actively exploited in attacks. An unauthenticated, remote attacker can exploit the flaw to execute arbitrary commands on the […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Cisco Patches Critical Zero-Day in Unified Communications and Webex Calling Cisco has addressed a critical zero-day remote code execution vulnerability (CVE-2026-20045) in its Unified Communications and Webex Calling platforms. This flaw, which has a CVSS score of 8.2, is actively exploited by unauthenticated remote attackers to execute arbitrary commands. Users of these services are advised to apply the patch promptly. 2 sources 90

Extracted Entities

Cisco fixed actively exploited Unified Communications zero day

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CVEs (1)

Platforms (2)