Cisco Patches CVE-2026-20230 in Unified CM as Exploit Code Goes Public

Vira Manti

Published Jun 4, 2026, 5:11 PM UTC

Source: SecuritySource

- Cisco patched CVE-2026-20230 in Unified CM. Unauth SSRF lets attackers write files and escalate to root. PoC is public; zero-day status is a ticking clock. This is digital infrastructure, not just VoIP. If you run Cisco UC, patch now. Don’t wait for the exploit to hit your logs. Bad OPSEC gets you owned. Stay secure, stay sharp.