Cisco Unified CM flaw actively exploited to drop webshells (CVE-2026-20230)
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-20045 | Unauthenticated RCE to root in Cisco Unified Communications products | 9.8 | 5% | KEV | KEV |
| CVE-2026-20230 | SSRF in Cisco Unified Communications Manager Enables Root Escalation | 8.6 | 89% | KEVPoC | KEV |
From the original article
2 min read at helpnetsecurity.com
CVE-2026-20230, a server-side request forgery (SSRF) vulnerability affecting Cisco’s Unified Communications Manager (Unified CM), is being exploited to drop webshells and achieve remote code execution capability on the underlying server. “Our honeypots are seeing automated sweeps dropping webshells, all via Tor,” threat intelligence firm Defused warned today, after observing initial attacks over the weekend.
By @zeljkazorz · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.