Search: CVE-2026-20034

CVE-2026-20034 is a high-severity vulnerability in Cisco Unity Connection's web-based management interface. It allows an authenticated remote attacker to execute arbitrary code as root by exploiting insufficient validation of user-supplied input via a crafted API request. Successful exploitation could lead to complete compromise of the affected device. The attacker must have valid user credentials to exploit this issue. The vulnerability affects multiple versions of Cisco Unity Connection, including 12.5(1) through 15SU3. No official patch or remediation guidance has been confirmed yet.