Cisco Unified CM Flaw Exploited After PoC Reveals File-Write Path to Root

Summary

Threat actors have begun to exploit a recently disclosed critical security flaw impacting Cisco Unified Communications Manager (Unified CM) and Unified Communications Manager Session Management Edition (Unified CM SME). The vulnerability, tracked as CVE-2026-20230 (CVSS score: 8.6), is a case of improper input validation for specific HTTP requests that could allow an unauthenticated, remote

Lotu Radar provides attributed news summaries and links to the original publisher. Full reporting and copyright remain with the source.