Cisco Issues Security Advisory for Unified Communications Manager Vulnerability
NEOSEC enrichment — no mirror of the original source
Cisco has published a security advisory warning of a critical server-side request forgery (SSRF) in Cisco Unified Communications Manager. CVE-2026-20230, CVSS score 8.6, is the result of improper input validation for specific HTTP requests.
Source: SANS NewsBites. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. Full body and expert context live with the original.
Read the issue at SANS NewsBites →Linked advisories
More on Communications
Other advisories
- CVE-2026-90925noneEine Schwachstelle zur Pfad-Traversierung in Logsign SIEM von Innotim Software, Telecommunications and Consultancy Trade Ltd.
- CVE-2026-90926noneEine Schwachstelle zur unsachgemäßen Steuerung der Code-Erzeugung ('Befehls-Injektion') in der Software von Innotim Software, Telecommunications and Consultancy Trade Ltd.
- CVE-2026-83419highOracle Communications: Mehrere Schwachstellen
- CVE-2026-96774noneIn SPON Communications IP Network Audio Device XC-9603 1.
- CVE-2026-83419noneOracle Communications: Sicherheitsluecke
- CVE-2026-83418noneOracle Communications: Sicherheitsluecke
- CVE-2026-4176highOracle Communications: Mehrere Schwachstellen
- CVE-2026-71143noneoracle communications_unified_inventory_management: Sicherheitsluecke
Other news entries
- Newsdarkreading2026-10-05ClingSTUN Turns Vulnerable IoT Devices Into Proxy Nodes
- Newsthehackernews2026-09-28Hackers Use NeedyMantis to Maintain Long-Term Access in Breached Networks
- Newsbleepingcomputer2026-09-28US soldier gets 70 months in prison for extorting 10 tech, telecom firms
- Newskrebsonsecurity2026-09-25U.S. Soldier Gets 70 Months in Prison for AT&T, Verizon Extortions
- Newsdarkreading2026-09-24'Salesbleed' Exploits Salesforce Agents to Enable Slack Phishing
- Vulnerabilitybsi-cert-bund-wid2026-09-24Oracle Communications: Mehrere Schwachstellen
- Newsdarkreading2026-09-22How the CISO-CMO Alliance Builds Trust Before Crisis Strikes
- Newsthehackernews2026-09-16Attackers Exploit Issabel Framework Flaw Enabling Unauthenticated OS Command Execution
Source: https://www.securityweek.com/
ID