Cisco Unified CCX Remote Code Execution Vulnerabilities (CVE-2025-20354, CVE-2025-20358)

Back Securityboulevard

Cisco Unified CCX Remote Code Execution Vulnerabilities (CVE-2025-20354, CVE-2025-20358)

Securityboulevard • November 8, 2025

Share: View original

Customers can refer to the Cisco Security Advisory for detailed information the patches released to address these vulnerabilities . Fixed ...

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Cisco Unified CCX Vulnerabilities Enable Remote Code Execution Cisco disclosed two critical vulnerabilities in its Unified Center Express (CCX) platform, tracked as CVE-2025-20354 and CVE-2025-20358. These vulnerabilities allow unauthenticated remote attackers to execute malicious code and gain elevated privileges, affecting organizations using CCX for customer support and call center operations. Security updates have been released to address these issues. 2 sources 76

Extracted Entities

CVEs (2)

CVE-2025-20354 CVE-2025-20358