CVE-2026-20230

Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability

Unified Communications Manager

A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an unauthenticated, remote attacker to conduct server-side request forgery (SSRF) attacks through an affected device. This vulnerability is due to improper input validation for specific HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A…

3. Jun 2026

Ausgewertete Quellen

• Hersteller
  https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-ssrf-cXPnHcW
• Hinweis
  https://denizhalil.com/2026/06/12/cve-2026-20230-cisco-unified-cm-ssrf/
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-20230
• CISA
  Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability
• NVD
  CVE-2026-20230