VulnerabilityPublished
Cisco finally confirms attackers exploiting Unified CM flaw
Source Bleeping Computer
0
Mentioned vulnerabilities
Severity
MediumRated by Threat Radar
Data as of 3 Jul 2026, 01:20 UTC
What to do
AI-suggested
Cisco has released official patches in Unified CM versions 14SU6 and 15SU5 (September 2026 or COP) that fully remediate CVE-2026-20230. Customers are strongly urged to upgrade to these fixed releases as soon as possible. For those unable to patch immediately, Cisco recommends disabling the vulnerable WebDialer service to block incoming exploitation attempts. Monitor vendor advisories for updates and apply patches promptly to prevent ongoing exploitation.
Description
Cisco confirmed that attackers are now exploiting a Unified Communications Manager (Unified CM) vulnerability patched in early June. [...]
References
Community reviews
Loading reviews…