CVE-2026-20045

Cisco Unified Communications Products Code Injection Vulnerability

Unified Communications Manager

A vulnerability in Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Unity Connection, and Cisco Webex Calling Dedicated Instance could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device. This vulnerability is due to improper…

21. Jan 2026

Ausgewertete Quellen

• Hersteller
  https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-voice-rce-mORhqY4b
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-20045
• CISA
  Cisco Unified Communications Products Code Injection Vulnerability
• NVD
  CVE-2026-20045