CVE-2026-20230

Cisco Unified CM SSRF vulnerability allows unauthenticated remote attackers to write files to the OS and escalate to root.

This unpatched SSRF flaw enables remote attackers to write files to the underlying OS, facilitating privilege escalation to root without authentication. DIB organizations must patch immediately to prevent unauthorized code execution and data exfiltration from critical telephony infrastructure.

Shame score — A critical SSRF vulnerability allowing unauthenticated remote code execution and privilege escalation represents a severe security failure that exposes Cisco's Unified CM products to immediate exploitation.