CVE-2026-20230CISA KEVEPSS p99.6%

CVE-2026-20230Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability

Cisco / Unified Communications Manager

Description

Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) contain a server-side request forgery (SSRF) Vulnerability that could allow an unauthenticated, remote attacker to write files to the underlying operating system that could be used later to elevate to root.

Scoring

CVSS 8.6 ()
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
EPSS83.21% probability of exploitation · percentile 99.6% · 2026-07-30T12:03:05Z
Last modified2026-07-22

CISA KEV entry

Added to KEV: 2026-06-25

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
CVE-2025-20326
CVE
Cisco Unified Communications Products Code Injection Vulnerability
CVE
CVE-2026-20098
CVE
CVE-2026-20034
CVE
CVE-2025-20363
CVE
Cisco IP Phones Web Server Remote Code Execution and Denial-of-Service Vulnerability
Sourced from NVD + CISA KEV + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.