coldbraid

CVE-2026-20045 Cisco Unified Communications Manager

Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Unity Connection, and Cisco Webex Calling Dedicated Instance contain a code injection vulnerability…

CVSS
not scored

CWE-94

On CISA’s exploited list

Cisco Unified Communications Products Code Injection Vulnerability

Added
2026-01-21
Federal patch deadline
2026-02-11
Ransomware use
not known