Cisco Confirms In-the-Wild Exploitation of Unified CM Vulnerability
Source SecurityWeek
Mentioned vulnerabilities
Rated by Threat Radar
Data as of 3 Jul 2026, 01:18 UTC
What to do
AI-suggested
Cisco has released official patches for Unified CM and Unified CM SME version 14SU6 and plans to include fixes in version 15SU5. Customers are strongly advised to upgrade to these fixed software releases to remediate the vulnerability. Since the WebDialer service is disabled by default, disabling it if not required can reduce exposure. Monitor Cisco advisories for updates and apply patches promptly. Patch status is confirmed as fixed in 14SU6 and upcoming 15SU5 releases.
Description
A PoC exploit has been available since public disclosure, and the first exploitation attempts were observed last week. The post Cisco Confirms In-the-Wild Exploitation of Unified CM Vulnerability appeared first on SecurityWeek .