CVE-2025-20354

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

November 5, 2025

Last Seen

November 8, 2025

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Cisco Unified CCX Vulnerabilities Enable Remote Code Execution76.1

Cisco disclosed two critical vulnerabilities in its Unified Center Express (CCX) platform, tracked as CVE-2025-20354 and CVE-2025-20358. These vulnerabilities allow unauthenticated remote attackers to execute malicious code and gain elevated privileges, affecting organizations using CCX for customer...

Critical Remote Code Execution Vulnerabilities in Cisco Unified CCX72.8

Cisco disclosed two critical vulnerabilities in its Unified Center Express (CCX) platform, tracked as CVE-2025-20354 and CVE-2025-20358. These vulnerabilities allow unauthenticated remote attackers to execute malicious code, affecting organizations that utilize CCX for customer support and call cent...

Critical Vulnerabilities in Cisco Unified CCX Enable Remote Code Execution53.9

Cisco disclosed two critical vulnerabilities in its Unified Center Express (CCX) platform that could allow unauthenticated remote attackers to execute malicious code and gain elevated privileges. The vulnerabilities, tracked as CVE-2025-20354, affect organizations using CCX for customer support and...

Cisco ASA Zero-Day Exploited in State-Espionage Campaign50.0

Cisco disclosed a state-espionage campaign targeting its Adaptive Security Appliances (ASA), which are used for firewall and VPN functions. Attackers exploited two zero-day vulnerabilities to infiltrate government entities globally, deploying custom malware backdoors named 'Line Runner' and 'Line Da...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (7)

1 / 2

Related Entities

ArcaneDoor UAT4356 Storm-1849 Zero-day Exploit DDoS Malware Denial-of-Service Ransomware Data Breach Cisco Cisco Systems Government

CVE-2025-20354

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Public Exploits

CVE Details

Related Clusters (7)

Cisco Unified CCX Vulnerabilities Enable Remote Code Execution

Critical Remote Code Execution Vulnerabilities in Cisco Unified CCX

Critical Vulnerabilities in Cisco Unified CCX Enable Remote Code Execution

Cisco ASA Zero-Day Exploited in State-Espionage Campaign

Cisco Faces Multiple Critical Vulnerabilities in Unified CCX and Firewalls

Cisco Warns of New Attack Variant Targeting Firewalls

Cisco Firewalls Targeted by New Attack Variant Exploiting Critical Vulnerabilities

Related Articles (13)

Cisco Unified CCX Remote Code Execution Vulnerabilities (CVE-2025-20354, CVE-2025-20358)

Another Cisco ASA firewall attack wave uncovered

Cisco: Actively exploited firewall flaws now abused for DoS attacks

Cisco Issues Critical Warning Over New Unified Contact Center Express Vulnerabilities

Cisco fixes critical UCCX flaw allowing Root command execution

Cisco fixes critical flaws in Unified Contact Center Express

Multiple Vulnerabilities in Cisco Products Could Allow for Remote Code Execution

Cisco warns of 'new attack variant' battering firewalls under exploit for 6 months

Cisco warns of 'new attack variant' battering firewalls under exploit for 6 months

WARNING: Critical Cisco Vulnerabilities Enables Attackers To Execute Malicious Code

Cisco fixes critical UCCX flaws, patch ASAP! (CVE-2025-20358, CVE-2025-20354)

Critical Cisco UCCX flaw lets attackers run commands as root

Cisco CCX Vulnerabilities Open Door to Remote Attacks

Related Entities