SECURITYJun 4 · 16:55 UTCTHE HACKER NEWS[email protected] (The Hacker News)

Cisco Patches CVE-2026-20230 in Unified CM as Exploit Code Goes Public

Cisco has patched a server-side request forgery vulnerability (CVE-2026-20230) in Unified Communications Manager, allowing unauthenticated attackers to write files and escalate to root. Proof-of-concept exploit code is now public, though Cisco's PSIRT reports no observed attacks yet.

Nexus surfaces and summarizes. The full story lives at the source.

Mentioned

CiscoorganizationCVE-2026-20230topicUnified Communications Managertopicserver-side request forgerytopicPSIRTorganizationproof-of-concepttopic

Spot something wrong with this article?Report a problem →

Forward this

Related Signal

Adjacent reporting

SECURITYApr 24 · 07:24 UTC
LMDeploy CVE-2026-33626 Flaw Exploited Within 13 Hours of Disclosure
SECURITYJun 2 · 18:14 UTC
Oracle WebLogic CVE-2024-21182 Added to KEV Catalog After Active Exploitation
SECURITYMay 23 · 07:35 UTC
LiteSpeed cPanel Plugin CVE-2026-48172 Exploited to Run Scripts as Root
SECURITYApr 28 · 05:50 UTC
Microsoft Confirms Active Exploitation of Windows Shell CVE-2026-32202
SECURITYApr 30 · 22:48 UTC
The Internet Is Falling Down- CPanel/WHM Authentication Bypass CVE-2026-41940
SECURITYMay 30 · 06:41 UTC
PAN-OS GlobalProtect Authentication Bypass (CVE-2026-0257) Under Active Exploitation