Cisco Unified CM Flaw Exploited After PoC Reveals File-Write Path to Root

Kurzinfo

Metadaten

Original (extern): Link oeffnen
Veroeffentlicht: 2026-06-24 06:50 UTC
Importiert: 2026-07-01 05:07 UTC
CVSS: 8.6
Quelle-ID: thn_global
uid_hash: e3b6ce7c18210037c73ce6c98cba4f2b9fce6991db243ff7d355a42350842065

The Hacker News

Inhalt

Threat actors have begun to exploit a recently disclosed critical security flaw impacting Cisco Unified Communications Manager (Unified CM) and Unified Communications Manager Session Management Edition (Unified CM SME).

The vulnerability, tracked as CVE-2026-20230 (CVSS score: 8.6), is a case of improper input validation for specific HTTP requests that could allow an unauthenticated, remote

Verknuepfte CVEs

CVE-ID	Severity (Quelle)	CVSS (Quelle)	Severity (CVE.org)	CVSS (CVE.org)	EPSS	EPSS-Pctl	Veroeffentlicht (CVE.org)
CVE-2026-20230	HIGH	8.6	HIGH	8.6			2026-06-03

Quellen-Details

Bezeichnung	Name	Kategorie	Tags	Zielgruppe	Sprache	Feed-URL
The Hacker News	thn_global	security_news		-	de	https://feeds.feedburner.com/TheHackersNews

Zurueck zur Eintrags-Liste