Related Threat Clusters
-
CISA Alerts on Exploited Cisco Unified CM Zero-Day Vulnerability CVE-2026-20045
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent alert regarding the active exploitation of a zero-day remote code execution vulnerability in Cisco Unified Communications products,…
3 articles · Updated January 22, 2026 -
Cisco Unified CM Remote Code Execution Vulnerability (CVE-2026-20045)
A remote code execution vulnerability, identified as CVE-2026-20045, affects Cisco Unity Connection and Cisco Webex Calling Dedicated Instance. The issue arises from improper handling of input, allowing attackers to…
1 article · Updated January 28, 2026 -
Critical SSRF Vulnerability in Cisco Unified CM Exposes Enterprises to Root Access
Cisco disclosed a critical server-side request forgery (SSRF) vulnerability in its Unified Communications Manager (CVE-2026-20230) on June 3, 2026. This flaw allows attackers with network access to write arbitrary files…
8 articles · Updated June 4, 2026 -
Critical RCE Vulnerability in BeyondTrust Software Requires Immediate Patching
BeyondTrust has issued a warning regarding a critical remote code execution (RCE) vulnerability in its Remote Support and Privileged Remote Access software. The flaw, tracked as CVE-2026-1731, allows unauthenticated…
1495 articles · Updated February 9, 2026 -
Cisco Unified CM Zero-Day Vulnerability Under Attack
A critical-severity vulnerability in Cisco Unified CM has been identified, allowing attackers to exploit it via crafted network packets for remote code execution. This flaw has recently come under active exploitation,…
2 articles · Updated January 26, 2026
Recent Intelligence Reports
- Cisco Unified CM CVE-2026-20230: Webshell Drops Confirmed, Patch Alone Won't Evict Attackers — Techtimes · June 24, 2026
- Cisco Unified CM SSRF Flaw CVE-2026-20230: Public Exploit Code Opens Path to Root — Techtimes · June 4, 2026
- Cisco warns of critical Unified CM flaw with PoC exploit code — Bleepingcomputer · June 4, 2026
- Cisco Unified CM Remote Code Execution Vulnerability (CVE-2026-20045) — Securityboulevard · January 28, 2026
- 2024 VMware Flaw Now in Attackers' Crosshairs — Securityweek · January 26, 2026
- Cisco Unified CM Zero-Day RCE Under Attack, CISA Issues Warning — Gbhackers · January 22, 2026
- CISA Warns of Actively Exploited Cisco Unified CM Zero — Cyberpress · January 22, 2026