
Cisco Unified CM Critical SSRF Vulnerability Enables Unauthenticated Root Access via File Write Exploit
Cisco disclosed CVE-2026-20230 on June 3, 2026, a server-side request forgery vulnerability in Unified Communications Manager and Unified CM Session Management Edition that carries a CVSS score of 8.6 but earns Cisco’s internal Critical rating because exploitation chains from unauthenticated remote




