CVE-2025-20309

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

July 2, 2026

Last Seen

July 2, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Cisco Confirms Active Exploitation of Unified CM Vulnerability CVE-2026-2023072.9

Cisco has confirmed that attackers are exploiting a vulnerability in its Unified Communications Manager (Unified CM), tracked as CVE-2026-20230, which was patched on June 3, 2026. This vulnerability allows for server-side request forgery (SSRF) attacks through improperly validated HTTP requests, pot...