Cisco Unified Communications Manager Server-Side Request Forgery Vulnerability

Source: cisco / cisco-sa-cucm-ssrf-cXPnHcW — original advisory

Published: 2026-06-03 · Last updated: 2026-07-01 · Vendor severity: Critical Exploited (KEV)

CVEs

CVE	CVSS	CWE	Exploitation
CVE-2026-20230	8.6	CWE-918: Server-Side Request Forgery (SSRF)	Exploited (KEV)

Product	Affected versions	Fixed version
Cisco Unified Communications Manager	Not specified by vendor	Not specified by vendor