Exploitation of Cisco Unified CM (CVE-2026-20230): SSRF, file writes and risk of root escalation

Colleagues, note active exploitation of a critical Cisco Unified CM flaw.

- Cisco: improper HTTP request validation enables SSRF and OS file writes.
- Defused Cyber observed attacks with file:// payloads; SSD Secure Disclosure published additional technical details.
- Successful exploitation requires WebDialer (disabled by default). Patches: 14SU6 and 15SU5; if you cannot patch, disable WebDialer temporarily.

Why it matters: exploitation may lead to root privilege escalation and compromise of communications infrastructure.

How do you plan to respond in your environments?

#cybersecurity #Cisco #vulnerabilities #infosec