Cisco Unity Connection Remote Code Execution and Server-Side Request Forgery Vulnerabilities
Multiple vulnerabilities in Cisco Unity Connection could allow a remote attacker to execute arbitrary code on or conduct server-side request forgery (SSRF) attacks through an affected device. For more information about these vulnerabilities, see the Details ["#details"] section of this advisory. Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-20035US | — | — | ||
A vulnerability in the web UI of Cisco Unity Connection Web Inbox could allow an unauthenticated, remote attacker to conduct SSRF attacks through an affected device.
This vulner… | ||||
| CVE-2026-20034US | — | — | ||
A vulnerability in the web-based management interface of Cisco Unity Connection could allow an authenticated, remote attacker to execute arbitrary code on an affected device.
Th… | ||||
references
External citations — patches, advisories, analysis.
- Security Vulnerability Policyexternal
- CSCwq36774external
- CSCwq36834external
- Cisco Unity Connection Remote Code Execution and Server-Side Request Forgery Vulnerabilitiesself
- Cisco Security Vulnerability Policyexternal
- fixed software releaseexternal
- ciscocm.cuc.V15_CSCwq36774-CSCwq36834_C0277-1.zipexternal
- Cisco Support and Downloadsexternal
remediations (42)
- Fixed12.5(1)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed12.5(1)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed12.5(1)SU1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed12.5(1)SU1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed12.5(1)SU2
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed12.5(1)SU2
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed12.5(1)SU3
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed12.5(1)SU3
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed12.5(1)SU4
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed12.5(1)SU4
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed12.5(1)SU5
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed12.5(1)SU5
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed12.5(1)SU6
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed12.5(1)SU6
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed12.5(1)SU7
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed12.5(1)SU7
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed12.5(1)SU8
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed12.5(1)SU8
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed12.5(1)SU8a
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed12.5(1)SU8a
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed12.5(1)SU9
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed12.5(1)SU9
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed14
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed14
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed14SU1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed14SU1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed14SU2
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed14SU2
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed14SU3
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed14SU3
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed14SU3a
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed14SU3a
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed14SU4
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed14SU4
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15SU1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15SU1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15SU2
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15SU2
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15SU3
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15SU3
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan