A recently patched Cisco Unified CM flaw tracked as CVE-2026-20230 is now being actively exploited, with attackers using a PoC to trigger SSRF, arbitrary file writes, and potential root privilege escalation. Cisco has not yet confirmed in-the-wild exploitation, but Defused observed attacks and SSD Secure Disclosure later published technical details and proof-of-concept code. #Cisco #UnifiedCM #CVE-2026-20230
Keypoints
- CVE-2026-20230 affects Cisco Unified Communications Manager.
- The flaw can be abused by an unauthenticated remote attacker.
- Exploitation may enable SSRF, arbitrary file writes, and root escalation.
- Defused observed active attacks using an unvetted PoC.
- SSD Secure Disclosure later released technical details and PoC code.
Read More: https://www.securityweek.com/hackers-exploiting-cisco-unified-cm-vulnerability/