Summary
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Cisco Unified Communications Manager (CUCM) ausnutzen, um Dateien zu manipulieren und dadurch potenziell root Rechte zu erlangen.
Product
Der Cisco Unified Communications Manager (CUCM, ehemals CallManager) dient zur Gesprächsvermittlung in IP-Telefonie-Netzen.
Vulnerabilities 1
-
High 8.6
Cisco Unified Communications Manager Server-Side Request Forgery Vulnerability
A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an unauthenticated, remote attacker to conduct server-side request forgery (SSRF) attacks thr…
KEV Jun 25, 2026
Revision history
-
#2
Aktive Ausnutzung gemeldet
-
#1
Initiale Fassung
References
-
Cisco Security Advisory cisco-sa-cucm-ssrf-cXPnHcW vom 2026-06-04
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-ssrf-cXPnHcW
-
Bleeping Computer Artikel vom 2026-06-23
https://www.bleepingcomputer.com/news/security/cisco-unified-cm-sme-flaw-cve-2026-20230-now-exploited-in-attacks/