CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2026-06-03
Cisco Unified Communications Manager (Unified CM) SSRF and Privilege Escalation Vulnerability (CVE-2026-20230)
[Affected Scope] Cisco Unified Communications Manager (Unified CM) and Session Management Edition (Unified CM SME) with WebDialer service enabled
[Impact] Unauthenticated remote attackers can perform SSRF, write arbitrary files to the underlying OS, and subsequently escalate privileges to root
[Mitigation] Apply official Cisco security patches immediately, or disable the WebDialer service as a temporary workaround