Cisco Unified CM — Cyber Threats, Attacks & Incidents

Overview

Cisco Unified Communications Manager (Unified CM) is Cisco's on-premises call-processing platform that handles enterprise VoIP/video communications, call routing, and associated UC services across Cisco devices and endpoints. A zero-day remote code execution vulnerability in this platform is being actively exploited, making it a critical cybersecurity risk and prompting US CISA warnings about the threat and necessary mitigations.

Related Threat Clusters

• CISA Alerts on Exploited Cisco Unified CM Zero-Day Vulnerability CVE-2026-20045

  The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent alert regarding the active exploitation of a zero-day remote code execution vulnerability in Cisco Unified Communications products,…

  3 articles · Updated January 22, 2026
• Cisco Unified CM Remote Code Execution Vulnerability (CVE-2026-20045)

  A remote code execution vulnerability, identified as CVE-2026-20045, affects Cisco Unity Connection and Cisco Webex Calling Dedicated Instance. The issue arises from improper handling of input, allowing attackers to…

  1 article · Updated January 28, 2026
• Critical SSRF Vulnerability in Cisco Unified CM Exposes Enterprises to Root Access

  Cisco disclosed a critical server-side request forgery (SSRF) vulnerability in its Unified Communications Manager (CVE-2026-20230) on June 3, 2026. This flaw allows attackers with network access to write arbitrary files…

  8 articles · Updated June 4, 2026
• Critical RCE Vulnerability in BeyondTrust Software Requires Immediate Patching

  BeyondTrust has issued a warning regarding a critical remote code execution (RCE) vulnerability in its Remote Support and Privileged Remote Access software. The flaw, tracked as CVE-2026-1731, allows unauthenticated…

  635 articles · Updated February 9, 2026
• Cisco Unified CM Zero-Day Vulnerability Under Attack

  A critical-severity vulnerability in Cisco Unified CM has been identified, allowing attackers to exploit it via crafted network packets for remote code execution. This flaw has recently come under active exploitation,…

  2 articles · Updated January 26, 2026

Recent Intelligence Reports

• Cisco Unified CM CVE-2026-20230: Webshell Drops Confirmed, Patch Alone Won't Evict Attackers — Techtimes · June 24, 2026
• Cisco Unified CM SSRF Flaw CVE-2026-20230: Public Exploit Code Opens Path to Root — Techtimes · June 4, 2026
• Cisco warns of critical Unified CM flaw with PoC exploit code — Bleepingcomputer · June 4, 2026
• Cisco Unified CM Remote Code Execution Vulnerability (CVE-2026-20045) — Securityboulevard · January 28, 2026
• 2024 VMware Flaw Now in Attackers' Crosshairs — Securityweek · January 26, 2026
• Cisco Unified CM Zero-Day RCE Under Attack, CISA Issues Warning — Gbhackers · January 22, 2026
• CISA Warns of Actively Exploited Cisco Unified CM Zero — Cyberpress · January 22, 2026

Related Entities