Threats tagged 'ghsa-w7jh-xmq5-2m7v'

CVE-2026-20035 is a vulnerability in the web UI of Cisco Unity Connection Web Inbox that allows unauthenticated remote attackers to perform Server-Side Request Forgery (SSRF) attacks. The flaw arises from improper input validation of certain HTTP requests, enabling attackers to send crafted requests that cause the affected device to initiate arbitrary network requests. The vulnerability has a high severity score of 7.2 and impacts confidentiality and integrity with no known exploits in the wild. No specific affected versions or patches are provided in the available data.