Cisco patches SSRF flaw in Unified CM enabling root access

CVE-2026-20230 is a critical unauthenticated SSRF vulnerability affecting Cisco Unified CM and SME. This flaw can lead to root-level compromise when the WebDialer service is enabled, which is disabled by default. Exploitation involves sending a crafted HTTP request that manipulates the server, allowing the attacker to write files and potentially elevate…