Skip to content
Sign in

Cisco product

Unified Communications Manager

Alert
No CISA KEV deadline is open. CISA last added an Unified Communications Manager CVE on 25 Jun.

Tracked since 22 Jan · latest article 22 Oct · RSS · API

0Open KEV deadlines

None open

0Added to KEV · 90 days

of 2 in the full CISA catalogue · all time

0High exploit odds · current

EPSS top 5%, not in KEV

1Articles · 7 days

usual rate

Exploited, by due date2

Unified Communications Manager CVEs in CISA KEV with their federal deadlines. None is open.

Exploited Unified Communications Manager CVEs
CVEProductAddedFederal deadlineArticles
In CISA KEVCVE-2026-20230Unified Communications Manager25 JunPassed 28 Jun16
In CISA KEVCVE-2026-20045Unified Communications Manager21 JanPassed 11 Feb4
Vendor CSV of 101 entries for CiscoAll 101 vendor entries, including other products.

Patch cadence and exploit odds

How often CISA adds Unified Communications Manager CVEs, how many have a fix, and where their exploit odds sit.

Added to CISA KEV per quarter

0Q1 ’250Q2 ’250Q3 ’250Q4 ’251Q1 ’261Q2 ’260Q3 ’260Q4 ’26
Show as table
Added to CISA KEV per quarter
QuarterAdded
Q1 20250
Q2 20250
Q3 20250
Q4 20250
Q1 20261
Q2 20261
Q3 20260
Q4 20260

Fix listed

1 of 3 CVEs in coverage

2 CVEs have no vendor fix recorded yet.

EPSS percentile of each CVE

One dot per CVE; a red diamond marks those in CISA KEV.

top 5%CVE-2026-20230: 99.8th percentile, in CISA KEVCVE-2026-20045: 91.5th percentile, in CISA KEVCVE-2026-76487: 49.1th percentile050100
Show as table
FIRST EPSS percentiles across CVEs in coverage
CVEEPSS percentile
CVE-2026-2023099.8
CVE-2026-2004591.5
CVE-2026-7648749.1

Coverage21 articles · all time

The latest 21 articles naming Unified Communications Manager, in the shared story grammar.

Full timeline
Quiet for 6 dayslast report 22 Oct21 articles7 outlets

21 articles from 7 outlets since 22 Jan. Quiet since 22 Oct.

Now22 Jan1 Jun813182329419 OctFirst reportSecurity Affairs · 22 Jan, 08:41CISA alert25 Jun, 22:22 · official
  • Thu 22 Jan, 08:41 UTC. Security Affairs, first report. U.S. CISA adds a flaw in Cisco Unified Communications products to its Known Exploited Vulnerabilities catalog. Cites a CVE in CISA KEV.
  • Thu 22 Jan, 09:10 UTC. SecurityWeek, its first report on the story. Hackers Targeting Cisco Unified CM Zero-Day. Cites a CVE in CISA KEV.
  • Fri 23 Jan, 21:26 UTC. Dark Reading, its first report on the story. Exploited Zero-Day Flaw in Cisco UC Could Affect Millions. Cites a CVE in CISA KEV.
  • Mon 26 Jan, 13:11 UTC. The Hacker News, its first report on the story. ⚡ Weekly Recap: Firewall Flaws, AI-Built Malware, Browser Traps, Critical CVEs & More. Cites a CVE in CISA KEV.
  • Thu 4 Jun, 03:51 UTC. SecurityOnline, its first report on the story. Cisco Unified CM SSRF flaw exposes systems to remote takeover. Cites a CVE in CISA KEV.
  • Thu 4 Jun, 08:51 UTC. SecurityWeek. Cisco patches CVE-2026-20230 UC Manager flaw enabling root access. Cites a CVE in CISA KEV.
  • Thu 4 Jun, 13:50 UTC. Security Affairs. Cisco Fixes CVE-2026-20230 SSRF Flaw in Unified CM, Root Risk.. Cites a CVE in CISA KEV.
  • Thu 4 Jun, 17:11 UTC. The Hacker News. Cisco Patches CVE-2026-20230 in Unified CM as Exploit Code Goes Public. Cites a CVE in CISA KEV.
  • Fri 5 Jun, 13:01 UTC. SOCRadar, its first report on the story. Cisco patches SSRF flaw in Unified CM enabling root access. Cites a CVE in CISA KEV.
  • Wed 24 Jun, 05:50 UTC. SecurityWeek. Cisco Unified CM flaw lets hackers gain root access via SSRF. Cites a CVE in CISA KEV.
  • Wed 24 Jun, 14:10 UTC. Security Affairs. Cisco CUCM CVE-2026-20230 SSRF flaw lets attackers gain root. Cites a CVE in CISA KEV.
  • Thu 25 Jun, 22:22 UTC. CISA, its first report on the story. Cisco Manager SSRF Flaw Exploited, CISA Adds CVE‑2026‑20230 to KEV. Cites a CVE in CISA KEV.
  • Thu 25 Jun, 22:40 UTC. Dark Reading. Cisco CUCM flaw allows hackers to gain root access in 24 hours. Cites a CVE in CISA KEV.
  • Fri 26 Jun, 03:31 UTC. SecurityOnline. Cisco and PTC flaws under active attack, CISA adds to KEV list. Cites a CVE in CISA KEV.
  • Fri 26 Jun, 05:40 UTC. SecurityOnline. PTC Windchill flaw spotted; Claude Fable 5 hints at AWS return. Cites a CVE in CISA KEV.
  • Fri 26 Jun, 06:19 UTC. CISA. CISA Adds Cisco UC Manager SSRF Flaw to KEV Catalog. Cites a CVE in CISA KEV.
  • Fri 26 Jun, 11:31 UTC. Security Affairs. CISA adds critical PTC Windchill, Cisco UC flaws to KEV list. Cites a CVE in CISA KEV.
  • Fri 26 Jun, 14:21 UTC. SecurityOnline. Cisco SD-WAN Zero-Day Exploited in Attacks. Cites a CVE in CISA KEV.
  • Mon 29 Jun, 03:01 UTC. SecurityOnline. Cisco Unified CM RCE Flaw Exploited in the Wild as PoC Code Goes Public. Cites a CVE in CISA KEV.
  • Thu 2 Jul, 11:12 UTC. SecurityWeek. Cisco Warns of Exploit in Manager SSRF Flaw CVE-2026-20230. Cites a CVE in CISA KEV.
  • Thu 22 Oct, 02:52 UTC. SecurityOnline. Cisco fixes critical Unified CM flaws that could expose networks.
  • Known exploited CVE
  • CVE not in KEV
  • No CVE
  • Larger: an outlet’s first report
  • Square: official source
  • Coverage over time
  • Quiet time, folded
Show all 21 articles as a list
  1. Thu 22 JanDay 02
    1. U.S. CISA adds a flaw in Cisco Unified Communications products to its Known Exploited Vulnerabilities catalog08:41 · Security Affairs · First report · Exploited CVE · Known exploited CVE
    2. Hackers Targeting Cisco Unified CM Zero-Day09:10 · SecurityWeek · Known exploited CVE

  2. Quiet for 2 days

    Fri 23 JanDay 11
    1. Exploited Zero-Day Flaw in Cisco UC Could Affect Millions21:26 · Dark Reading · Known exploited CVE

  3. Quiet for 3 days

    Mon 26 JanDay 41
    1. ⚡ Weekly Recap: Firewall Flaws, AI-Built Malware, Browser Traps, Critical CVEs & More13:11 · The Hacker News · Picked up again · Known exploited CVE

  4. Quiet for 18 weeks

    Thu 4 JunDay 1334
    1. Cisco Unified CM SSRF flaw exposes systems to remote takeover03:51 · SecurityOnline · Picked up again · Known exploited CVE
    2. Cisco patches CVE-2026-20230 UC Manager flaw enabling root access08:51 · SecurityWeek · Known exploited CVE
    3. Cisco Fixes CVE-2026-20230 SSRF Flaw in Unified CM, Root Risk.13:50 · Security Affairs · Known exploited CVE
    4. Cisco Patches CVE-2026-20230 in Unified CM as Exploit Code Goes Public17:11 · The Hacker News · Known exploited CVE
  5. Fri 5 JunDay 1341
    1. Cisco patches SSRF flaw in Unified CM enabling root access13:01 · SOCRadar · Known exploited CVE

  6. Quiet for 3 weeks

    Wed 24 JunDay 1532
    1. Cisco Unified CM flaw lets hackers gain root access via SSRF05:50 · SecurityWeek · Picked up again · Known exploited CVE
    2. Cisco CUCM CVE-2026-20230 SSRF flaw lets attackers gain root14:10 · Security Affairs · Known exploited CVE
  7. Thu 25 JunDay 1542
    1. Cisco Manager SSRF Flaw Exploited, CISA Adds CVE‑2026‑20230 to KEV22:22 · CISA · official · CISA alert · Known exploited CVE
    2. Cisco CUCM flaw allows hackers to gain root access in 24 hours22:40 · Dark Reading · Known exploited CVE
  8. Fri 26 JunDay 1555
    1. Cisco and PTC flaws under active attack, CISA adds to KEV list03:31 · SecurityOnline · Known exploited CVE
    2. PTC Windchill flaw spotted; Claude Fable 5 hints at AWS return05:40 · SecurityOnline · Known exploited CVE
    3. CISA Adds Cisco UC Manager SSRF Flaw to KEV Catalog06:19 · CISA · official · Known exploited CVE
    Show 2 more from 26 Jun
    1. CISA adds critical PTC Windchill, Cisco UC flaws to KEV list11:31 · Security Affairs · Known exploited CVE
    2. Cisco SD-WAN Zero-Day Exploited in Attacks14:21 · SecurityOnline · Known exploited CVE

  9. Quiet for 3 days

    Mon 29 JunDay 1581
    1. Cisco Unified CM RCE Flaw Exploited in the Wild as PoC Code Goes Public03:01 · SecurityOnline · Picked up again · Known exploited CVE

  10. Quiet for 3 days

    Thu 2 JulDay 1611
    1. Cisco Warns of Exploit in Manager SSRF Flaw CVE-2026-2023011:12 · SecurityWeek · Picked up again · Known exploited CVE

  11. Quiet for 16 weeks

    Thu 22 OctDay 2731
    1. Cisco fixes critical Unified CM flaws that could expose networks02:52 · SecurityOnline · Picked up again

All CVEs in coverage3

Exploited first, then by EPSS

In the CVE tracker
  • CVE-2026-20230Exploited

    Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability

    8.6High88% EPSS · 16 articles
  • CVE-2026-20045Exploited

    Cisco Unified Communications Products Code Injection Vulnerability

    8.2High4.5% EPSS · 4 articles
  • CVE-2026-76487

    Cisco Unified Communications Manager Improper Access Control Vulnerability

    5.3Medium0.6% EPSS · 1 article
CyberSIXTSignal over noise
Updated AboutDevelopersSign in