![Wanted: Suspect for Homicide in the 15th District [VIDEO]](https://thephillypi.com/wp-content/uploads/2026/11/Rewrite-this-crime-blotter-title-into-a-high-impact-SEO-friendly-headline-330x220.jpg)
![Wanted: Suspect for Burglary/Sexual Assault in the 5th District [VIDEO]](https://thephillypi.com/wp-content/uploads/2026/10/PHILADELPHIA-BREAKING-Police-Release-Video-of-Suspect-Wanted-in-5th-330x220.jpg)
Cisco patched a critical zero-day RCE flaw (CVE-2026-20045) in Unified Communications and Webex Calling that is actively exploited in the wild.
Cisco patched a critical zero-day remote code execution flaw, tracked as CVE-2026-20045 (CVSS score of 8.2), actively exploited in attacks.
An unauthenticated, remote attacker can exploit the flaw to execute arbitrary commands on the underlying operating system of an affected device.
The bug affected Cisco Unified CM, Unified CM SME, IM & Presence, Unity Connection, and Webex Calling Dedicated Instance.
“This vulnerability is due to improper validation of user-supplied input in HTTP requests. An attacker could exploit this vulnerability by sending a sequence of crafted HTTP requests to the web-based management interface of an affected device.” reads the advisory. “A successful exploit could allow the attacker to obtain user-level access to the underlying operating system and then elevate privileges to root.”
Below are impacted versions:
Unified CM, Unified CM IM&P, Unified CM SME, and Webex Calling Dedicated Instance
EXPLORE MORE
Rep. Meuser on SBC Franchise Hearing
As lawmakers on Capitol Hill continue to evaluate the challenges facing American…
Massive Fire Tears Through Camden County Tobacco Store Overnight
CAMDEN COUNTY, N.J. — A commercial fire broke out at a local…
Shocking Video: Hero Witness Performs Daring Citizens Arrest After Philly Crash
PHILADELPHIA — In moments of sudden chaos on Greater Philadelphia roadways, everyday…
Bell starts production of 12 AH-1Z Viper attack helicopters for Nigeria
Bell starts production of 12 AH-1Z Viper attack helicopters for Nigeria. 17…
Massive Smoke Plume As Tanker Erupts In Flames, Spills Oil Off Russia's Sochi Coast
The Black Sea tanker wars have continued Tuesday. In the latest tit-for-tat…
| Cisco Unified CM, Unified CM IM&P, Unified CM SME, and Webex Calling Dedicated Instance Release | First Fixed Release |
|---|---|
| 12.5 | Migrate to a fixed release. |
| 14 | 14SU5 or apply patch file:1 ciscocm.V14SU4a_CSCwr21851_remote_code_v1.cop.sha512 |
| 15 | 15SU4 (Mar 2026) or apply patch file:1 ciscocm.V15SU2_CSCwr21851_remote_code_v1.cop.sha512 ciscocm.V15SU3_CSCwr21851_remote_code_v1.cop.sha512 |
1. Patches are version-specific. Consult the README attached to the patch for details.
Unity Connection
| Cisco Unity Connection Release | First Fixed Release |
|---|---|
| 12.5 | Migrate to a fixed release. |
| 14 | 14SU5 or apply patch file:1 ciscocm.cuc.CSCwr29208_C0266-1.cop.sha512 |
| 15 | 15SU4 (Mar 2026) or apply patch file:1 ciscocm.cuc.CSCwr29208_C0266-1.cop.sha512 |
1. Patches are version-specific. Consult the README attached to the patch for details.
The networking giant confirmed that there are no workarounds that address this vulnerability.
“The Cisco PSIRT is aware of attempted exploitation of this vulnerability in the wild. Cisco strongly recommends that customers upgrade to a fixed software release to remediate this vulnerability.” concludes the advisory.
Early January, Cisco addressed a medium-severity vulnerability, tracked as CVE-2026-20029 (CVSS score: 4.9), in Identity Services Engine (ISE) and ISE Passive Identity Connector (ISE-PIC) after a public PoC exploit was disclosed.
The vulnerability resides in the licensing feature of Cisco ISE and ISE-PIC due to improper XML parsing in the web management interface. An authenticated remote attacker with administrative privileges could exploit it by uploading a malicious file, enabling the reading of arbitrary files on the underlying operating system that should not be accessible, even to administrators.
