Same-Day Shells: A Full-Chain RCE Sweep Against Cisco CUCM (CVE-2026-20230) (opens in new tab)

Covers Cisco Unified Communications Manager Arbitrary File Write to RCEDiscussed on Hacker News

One day after a working exploit went public, we watched a fully automated SSRF-to-RCE chain sweep our Cisco CUCM sensors - SSRF, a rogue Apache Axis service, a two-stage webshell, and a root foothold, all fronted by Tor. We break down the tradecraft.

Read the original article