CVE-2026-20230 Cisco Cisco Unified Communications Manager
A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an unauthenticated, remote attacker to conduct server-side request forgery (SSRF) attacks…
- CVSS
- 8.6 High
- EPSS
- 89%
- Percentile
- 100
- Published
- 2026-06-03
- Force
- 10 of 12
- Public PoC
- 3
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
On CISA’s exploited list
Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability
- Added
- 2026-06-25
- Federal patch deadline
- 2026-06-28
- Ransomware use
- not known