Threat intelligence / Vulnerability

CVE-2026-20045

Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Unity Connection, and Cisco Webex Calling Dedicated Instance contain a code injection vulnerability that could allow the attacker to obtain user-level access to the underlying operating system and then elevate privileges to root.

Vulnerability

TypeVulnerability

External ID—

First seen2026-01-21

Last seen2026-01-21

Confidence

—

Labels

exploitedkev

CISA KEV context

Vendor / productCisco Unified Communications Manager

Added2026-01-21

Due date2026-02-11

4 recorded

Relationships

mitigates

from Remediate CVE-2026-20045

Mitigation

related-to

to Code Injection

Technique

2 external

References

nvd

CVE-2026-20045

open

cwe

CWE-94

open