CVE-2025-20376 is a vulnerability in the web UI of Cisco Unified CCX that allows an authenticated remote attacker with administrative credentials to upload and execute arbitrary files. This occurs due to insufficient input validation in the file upload mechanism, enabling command execution and privilege escalation to root.