Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability

Exploited in the wild. Listed by CISA on 2026-06-25; known to be used by ransomware.

88.5%likelihood of exploitation, next 30 days

100%of all CVEs are less likely

Nonecheck to confirm it

Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) contain a server-side request forgery (SSRF) Vulnerability that could allow an unauthenticated, remote attacker to write files to the underlying operating system that could be used later to elevate to root.

No ready check is stored for this CVE. Confirm it by hand from the references.

References

https://nvd.nist.gov/vuln/detail/CVE-2026-20230

Use this check only on systems you are authorised to test. Where the data comes from