Cisco Warns of Available PoC for Critical Unified CM Vulnerability
Source SecurityWeek
Mentioned vulnerabilities
Rated High by SecurityWeek
Data as of 4 Jun 2026, 22:13 UTC
What to do
AI-suggested
Cisco has released an official patch for this vulnerability in Unified CM and Unified CM SME version 14SU6. Organizations should apply this update to affected systems. The WebDialer service, which is disabled by default, must be enabled for the vulnerability to be exploitable; disabling this service if not needed further reduces risk. Cisco plans to include the fix in version 15SU5 as well. Since patches are available, remediation should be performed promptly. No additional mitigation steps are indicated by the vendor advisory.
Description
The high-severity flaw can be exploited remotely, without authentication, in server-side request forgery (SSRF) attacks. The post Cisco Warns of Available PoC for Critical Unified CM Vulnerability appeared first on SecurityWeek .