Cisco Issues Security Advisory for Unified Communications Manager Vulnerability
NEOSEC enrichment — no mirror of the original source
Cisco has published a security advisory warning of a critical server-side request forgery (SSRF) in Cisco Unified Communications Manager. CVE-2026-20230, CVSS score 8.6, is the result of improper input validation for specific HTTP requests.
Source: SANS NewsBites. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at SANS NewsBitesLinked advisories
Affected vendors and products
More on Communications
Other advisories
- MediumCVE-2026-76419Cisco Unified Communications Manager (CUCM): Schwachstelle ermöglicht Cross-Site Scripting
- MediumCVE-2026-76419Cisco Unified Communications Manager: Cross-Site-Scripting (XSS)
- MediumCVE-2026-76419Cisco Unified Communications Manager: Cross-Site-Scripting (XSS)
- Highbsi:WID-SEC-2025-0135Oracle Communications Applications: Mehrere Schwachstellen
- Not ratedosv:CLEANSTART-2026-RS14894phpseclib is a PHP secure communications library
- Not ratedosv:CLEANSTART-2026-LO63216phpseclib is a PHP secure communications library
- Not ratedosv:CLEANSTART-2026-SZ53469phpseclib is a PHP secure communications library
- HighCVE-2026-61674Oracle Communications: Mehrere Schwachstellen
Other news entries
- Cisco Unified Communications Manager (CUCM): Schwachstelle ermöglicht Cross-Site ScriptingVulnerabilityBSI CERT-Bund
- Cisco Unified Communications Manager Cross-Site Scripting VulnerabilityNewsCisco PSIRT
- Oracle Communications Applications: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- China-Aligned Hackers Hijack Sogou Input Method DNS Requests to Deploy DarkVigil BackdoorNewsThe Hacker News
- SlippyNunchucks hijacks Sogou Input Method’s brand promotion mechanism to distribute malwareNewsESET WeLiveSecurity
- WorkOS says attacker used ARTEX AI to breach internal sales appNewsBleepingComputer
- A deep dive into China’s Volt Typhoon suggests it is preparing for an assault on infrastructureNewsCSO Online
- Sony ISP subsidiary data breach exposes 2.5 million customer recordsNewsBleepingComputer
Source: https://www.securityweek.com/
ID