ThreatVectr
Tag

#CVE-2026-20230

3 stories taggedCVE-2026-20230.

Illustration for the story: Cisco admits hackers are breaking into its phone system software — here's what that means
Vulnerabilities

Cisco admits hackers are breaking into its phone system software — here's what that means

A flaw in Cisco Unified Communications Manager, the software that runs office phone systems, is now being actively abused after a patch and public exploit code lit the fuse.

4 min read
Illustration: a dense rack of enterprise networking and telephony hardware
Vulnerabilities

Cisco Unified CM SSRF Flaw Hits Active Exploitation Three Weeks After Patch Drop

A file-write chain rooted in CVE-2026-20230 is now being probed in the wild. PoC was already public when Cisco shipped the fix.

3 min read
Illustration: a dimly lit enterprise telecom server rack with VoIP gateway hardware and blinking amber status LEDs
Vulnerabilities

Cisco Unified CM Bug Under Active Exploit After PoC Drops Root File-Write Chain

CVE-2026-20230 (CVSS 8.6) lets unauthenticated attackers smuggle crafted HTTP requests into Unified CM. Cisco's PSIRT confirms in-the-wild attempts following public PoC release.

3 min read
© 2026 Threat Vectr