CVE-2026-20230

exploited in the wild☆ pin
CVSS
8.6
Reports
15
First seen
Jun 3, 2026
Last seen
Jul 14, 2026
Affected product

Cisco Unified Communications Manager

Associated actors

Recent reports

Critical

Microsoft July 2026 Patch Tuesday fixes 570 flaws, including 3 zero-days

Bleeping Computer
High

Cisco confirms active exploitation of Unified CM SSRF vulnerability CVE-2026-20230

Bleeping Computer
High

CERT-EU Cyber Brief June 2026 – Multi-Sector Espionage, Ransomware, and Zero-Days

CERT-EU Threat Intel
Critical

Cisco Unified Communications Manager SSRF Vulnerability (CVE-2026-20230) – Immediate Patching Required

NICS Taiwan
Critical

CISA Sets Urgent Deadline to Patch Cisco and PTC Vulnerabilities Exploited in Attacks

Bleeping Computer
High

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA Advisories
High

Cisco Unified CM SSRF Vulnerability CVE-2026-20230 Actively Exploited

The Hacker News
High

Cisco Unified CM SSRF Vulnerability CVE-2026-20230 Actively Exploited

Bleeping Computer
Critical

Check Point Threat Intelligence Report – June 2025 Breaches, Vulnerabilities, and AI Threats

Check Point Research
High

Cisco Catalyst SD-WAN Manager CVE-2026-20245 Actively Exploited – Patch Unavailable

The Hacker News
Critical

Cisco Patches Critical CVE-2026-20230 in Unified CM; PoC Exploit Public

The Hacker News
High

ThreatsDay Bulletin: AI Agents, C2 Tools, ClickFix, JS Backdoors & 20+ Security Stories

The Hacker News
Critical

Cisco Unified CM Critical SSRF Flaw Allows Root Privilege Escalation

Bleeping Computer
High

Multiple Vulnerabilities in Cisco Products – High Threat Alert A26-06-06

GovCERT.HK
Critical

Cisco Unified Communications Manager Critical Security Update (AV26-547)

Canadian Centre Alerts

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.