Cisco Unified CM flaw actively exploited to drop webshells (CVE-2026-20230)

CVE-2026-20230, a server-side request forgery (SSRF) vulnerability affecting Cisco’s Unified Communications Manager (Unified CM), is being exploited to drop webshells and achieve remote code execution capability on the underlying server. “Our honeypots are seeing automated sweeps dropping webshells,…

View Post on Scour ↗

More from Help Net Security on Scour.

Covers 2 stories including Cisco Unified Communications Manager Server-Side Request Forgery Vulnerability