{"revision":"f6a64b7668e54c0b841a8779424116d6","evidence":{"cve":"CVE-2026-20230","kev":{"cve":"CVE-2026-20230","product":"Unified Communications Manager","name":"Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability","dateAdded":"2026-06-25","dueDate":"2026-06-28","knownRansomwareUse":false,"shortDescription":"Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) contain a server-side request forgery (SSRF) Vulnerability that could allow an unauthenticated, remote attacker to write files to the underlying operating system that could be used later to elevate to root.","vendor":"Cisco","isMicrosoft":false,"products":["cisco"],"advisoryUrl":"https://www.cisco.com/c/en/us/support/docs/csa/cisco-sa-cucm-ssrf-cXPnHcW.html","publicExploit":null,"msrcUrl":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20230","cisaUrl":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-20230"},"epss":null,"observedAt":"2026-10-23T16:01:26.7735792+00:00","kevRetained":false,"reviewIdentity":"1a51295e666bee175803d683"}}