Back Securityaffairs.Co

Cisco patches high-severity flaws enabling SSRF, code execution attacks

Securityaffairs.Co •Pierluigi Paganini • May 7, 2026

Cisco fixed several high‑severity flaws in its enterprise products, including SSRF bugs in Unity Connection that could enable code execution or service disruption. Cisco released patches for multiple high‑severity vulnerabilities affecting its enterprise products. Successful exploitation could allow code execution, server‑side request forgery (SSRF), or denial‑of‑service attacks. Two notable flaws, CVE‑2026‑20034 and CVE‑2026‑20035, impact Cisco […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Cisco Unity Connection Vulnerabilities Enable Code Execution and SSRF Attacks Cisco has released security advisories addressing multiple high-severity vulnerabilities in its Unity Connection product. The most critical flaws allow authenticated attackers to inject and execute malicious code through manipulated API requests, while unauthenticated actors can perform Server-Side Request Forgery (SSRF) attacks. Additionally, vulnerabilities in Cisco's Managed Switches and IoT Field Network Director could lead to Denial-of-Service attacks. Cisco has issued patches for these vulnerabilities, with CVE-2026-20034 and CVE-2026-20035 being particularly noteworthy. The flaws affect various enterprise products, posing significant risks to organizations using these systems. Administrators are advised to apply the patches promptly to mitigate potential exploits. 7 sources 74

Extracted Entities

Cisco patches high-severity flaws enabling SSRF, code execution attacks

The full story

Extracted Entities

Attack Types (1)

CWE Weaknesses (1)

Platforms (1)