← Back to browse · API

CVE-2026-20045

Severity
HIGH
CVSS
8.2
EPSS
0.04307
Risk score
59.31
CISA KEV
Yes
PoC
Yes
Published
2026-01-21
Modified
2026-01-21
First seen
2026-08-07
Aliases
EUVD-2026-3600, GHSA-H4W3-HXW6-99Q7
Products
Cisco:Cisco Unified Communications Manager 12.5(1), Cisco:Cisco Unified Communications Manager 12.5(1)SU1, Cisco:Cisco Unified Communications Manager 12.5(1)SU3, Cisco:Cisco Unified Communications Manager 12.5(1)SU4, Cisco:Cisco Unified Communications Manager 12.5(1)SU5, Cisco:Cisco Unified Communications Manager 12.5(1)SU6, Cisco:Cisco Unified Communications Manager 12.5(1)SU7, Cisco:Cisco Unified Communications Manager 12.5(1)SU7a, Cisco:Cisco Unified Communications Manager 12.5(1)SU8a, Cisco:Cisco Unified Communications Manager 12.5(1)SU9, Cisco:Cisco Unified Communications Manager 14, Cisco:Cisco Unified Communications Manager 14SU1, Cisco:Cisco Unified Communications Manager 14SU2, Cisco:Cisco Unified Communications Manager 14SU3, Cisco:Cisco Unified Communications Manager 14SU4a, Cisco:Cisco Unified Communications Manager 15.0.1.13011-1, Cisco:Cisco Unified Communications Manager 15.0.1.13014-1, Cisco:Cisco Unified Communications Manager 15.0.1.13015-1, Cisco:Cisco Unified Communications Manager 15.0.1.13016-1, Cisco:Cisco Unified Communications Manager 15SU1, Cisco:Cisco Unified Communications Manager 15SU2, Cisco:Cisco Unified Communications Manager 15SU3a, Cisco:Cisco Unified Communications Manager IM and Presence Service 12.5(1), Cisco:Cisco Unified Communications Manager IM and Presence Service 12.5(1)SU3, Cisco:Cisco Unified Communications Manager IM and Presence Service 12.5(1)SU4, Cisco:Cisco Unified Communications Manager IM and Presence Service 12.5(1)SU5, Cisco:Cisco Unified Communications Manager IM and Presence Service 14SU1, Cisco:Cisco Unified Communications Manager IM and Presence Service 14SU2, Cisco:Cisco Unified Communications Manager IM and Presence Service 14SU4, Cisco:Cisco Unified Communications Manager IM and Presence Service 15, Cisco:Cisco Unified Communications Manager IM and Presence Service 15SU1, Cisco:Cisco Unified Communications Manager IM and Presence Service 15SU2, Cisco:Cisco Unified Communications Manager IM and Presence Service 15SU3, Cisco:Cisco Unity Connection 12.5(1), Cisco:Cisco Unity Connection 12.5(1)SU2, Cisco:Cisco Unity Connection 12.5(1)SU3, Cisco:Cisco Unity Connection 12.5(1)SU4, Cisco:Cisco Unity Connection 12.5(1)SU6, Cisco:Cisco Unity Connection 12.5(1)SU8, Cisco:Cisco Unity Connection 12.5(1)SU8a, Cisco:Cisco Unity Connection 12.5(1)SU9, Cisco:Cisco Unity Connection 14, Cisco:Cisco Unity Connection 14SU1, Cisco:Cisco Unity Connection 14SU2, Cisco:Cisco Unity Connection 14SU3, Cisco:Cisco Unity Connection 14SU4, Cisco:Cisco Unity Connection 15, Cisco:Cisco Unity Connection 15SU1, Cisco:Cisco Unity Connection 15SU2, Cisco:Cisco Unity Connection 15SU3, Cisco:Unified Communications Manager
Sources
packetstorm e1b15243aca2ad53b47ce4cf|CVE-2026-20045
cisa.gov CVE-2026-20045
euvd EUVD-2026-3600

Description

Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Unity Connection, and Cisco Webex Calling Dedicated Instance contain a code injection vulnerability that could allow the attacker to obtain user-level access to the underlying operating system and then elevate privileges to root.

References