HIGHVulnerability
Verified
Global

CISA KEV: Cisco Unified Communications Manager — Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability

·Source: CISA KEV

Updated:

Executive Summary

Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) contain a server-side request forgery (SSRF) Vulnerability that could allow an unauthenticated, remote attacker to write files to the underlying operating system that could be used later to elevate to root.

Analysis

Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) contain a server-side request forgery (SSRF) Vulnerability that could allow an unauthenticated, remote attacker to write files to the underlying operating system that could be used later to elevate to root. Added to CISA Known Exploited Vulnerabilities catalog on 2026-06-25. Remediation due: 2026-06-28.

Indicators of Compromise (1)

CVE (1)
CVE-2026-20230
NVDMITRE CVE
Source Attribution

Originally published by CISA KEV on Jun 25, 2026. Verified by: CISA.

Related Threats

MEDIUMVulnerabilityNEW

Anchorage Digital integrates with Lido to expand institutional access to Ethereum liquid staking

Anchorage Digital, home to America's first federally regulated crypto bank, has integrated with Lido, the largest liquid staking protocol on Ethereum, giving institutions compliant access to wstETH without leaving the Anchorage Digital platform.

Finextra
MEDIUMVulnerabilityNEW

Paysera becomes direct Visa member

Paysera LT, UAB has obtained the status of a direct Visa member (Issuing Principal Member) – one of the highest statuses in the payments industry.

Finextra
MEDIUMVulnerabilityNEW

Ondo Finance launches custodial tokenised securities in the US

Ondo Finance today announced the first live solution of third-party tokenized U.S. securities operating entirely within the existing regulatory perimeter in the U.S., in partnership with Broadridge Financial Solutions Inc., (NYSE: BR) to provide full voting rights for tokenized equity holders.

Finextra