CVE-2026-20045

Cisco Unified Communications Products Code Injection Vulnerability

Cisco Unified Communications ManagerNetwork & edge

CVSS

8.2High

ExploitationExploited in the wildAdded to KEV 21 Jan 2026CISA KEV

Exploit odds (EPSS)4.54%Chance of exploitation activity in the next 30 days, higher than 91% of CVEs. Scored 23 Oct 2026FIRST EPSS

Fixed inNone listedNo source names a fixed version. Check the vendor advisory below

Federal deadline11 Feb 2026Remediation due date for US federal agenciesCISA KEV

CISA required actionApply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. CISA KEV

What fixes it

No source in this snapshot names a fixed version. The vendor advisories under References are the place to check.

Timeline

21 Jan 2026Added to CISA KEVCISA KEV
21 Jan 2026, 16:26 UTCPublishedCVE List

Description

Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Unity Connection, and Cisco Webex Calling Dedicated Instance contain a code injection vulnerability that could allow the attacker to obtain user-level access to the underlying operating system and then elevate privileges to root.

Text from CVE List

Affected versions 71

Cisco Unified Communications Manageraffected: 12.5(1)SU2CVE List
Cisco Unified Communications Manageraffected: 12.5(1)SU1CVE List
Cisco Unified Communications Manageraffected: 12.5(1)CVE List
Cisco Unified Communications Manageraffected: 12.5(1)SU3CVE List
Cisco Unified Communications Manageraffected: 12.5(1)SU4CVE List
Cisco Unified Communications Manageraffected: 14CVE List
Cisco Unified Communications Manageraffected: 12.5(1)SU5CVE List
Cisco Unified Communications Manageraffected: 14SU1CVE List
Cisco Unified Communications Manageraffected: 12.5(1)SU6CVE List
Cisco Unified Communications Manageraffected: 14SU2CVE List
Cisco Unified Communications Manageraffected: 12.5(1)SU7CVE List
Cisco Unified Communications Manageraffected: 12.5(1)SU7aCVE List
Cisco Unified Communications Manageraffected: 14SU3CVE List
Cisco Unified Communications Manageraffected: 12.5(1)SU8CVE List
Cisco Unified Communications Manageraffected: 12.5(1)SU8aCVE List
Cisco Unified Communications Manageraffected: 15CVE List
Cisco Unified Communications Manageraffected: 15SU1CVE List
Cisco Unified Communications Manageraffected: 14SU4CVE List
Cisco Unified Communications Manageraffected: 14SU4aCVE List
Cisco Unified Communications Manageraffected: 15SU1aCVE List
Cisco Unified Communications Manageraffected: 12.5(1)SU9CVE List
Cisco Unified Communications Manageraffected: 15SU2CVE List
Cisco Unified Communications Manageraffected: 15.0.1.13010-1CVE List
Cisco Unified Communications Manageraffected: 15.0.1.13011-1CVE List
Cisco Unified Communications Manageraffected: 15.0.1.13012-1CVE List
Cisco Unified Communications Manageraffected: 15.0.1.13013-1CVE List
Cisco Unified Communications Manageraffected: 15.0.1.13014-1CVE List
Cisco Unified Communications Manageraffected: 15.0.1.13015-1CVE List
Cisco Unified Communications Manageraffected: 15.0.1.13016-1CVE List
Cisco Unified Communications Manageraffected: 15.0.1.13017-1CVE List
Cisco Unified Communications Manager IM and Presence Serviceaffected: 12.5(1)CVE List
Cisco Unified Communications Manager IM and Presence Serviceaffected: 12.5(1)SU1CVE List
Cisco Unified Communications Manager IM and Presence Serviceaffected: 12.5(1)SU2CVE List
Cisco Unified Communications Manager IM and Presence Serviceaffected: 12.5(1)SU3CVE List
Cisco Unified Communications Manager IM and Presence Serviceaffected: 12.5(1)SU4CVE List
Cisco Unified Communications Manager IM and Presence Serviceaffected: 14CVE List
Cisco Unified Communications Manager IM and Presence Serviceaffected: 12.5(1)SU5CVE List
Cisco Unified Communications Manager IM and Presence Serviceaffected: 14SU1CVE List
Cisco Unified Communications Manager IM and Presence Serviceaffected: 12.5(1)SU6CVE List
Cisco Unified Communications Manager IM and Presence Serviceaffected: 14SU2CVE List
Cisco Unified Communications Manager IM and Presence Serviceaffected: 14SU2aCVE List
Cisco Unified Communications Manager IM and Presence Serviceaffected: 12.5(1)SU7CVE List
Cisco Unified Communications Manager IM and Presence Serviceaffected: 14SU3CVE List
Cisco Unified Communications Manager IM and Presence Serviceaffected: 12.5(1)SU8CVE List
Cisco Unified Communications Manager IM and Presence Serviceaffected: 15CVE List
Cisco Unified Communications Manager IM and Presence Serviceaffected: 15SU1CVE List
Cisco Unified Communications Manager IM and Presence Serviceaffected: 14SU4CVE List
Cisco Unified Communications Manager IM and Presence Serviceaffected: 12.5(1)SU9CVE List
Cisco Unified Communications Manager IM and Presence Serviceaffected: 15SU2CVE List
Cisco Unified Communications Manager IM and Presence Serviceaffected: 15SU3CVE List
Cisco Unity Connectionaffected: 12.5(1)CVE List
Cisco Unity Connectionaffected: 12.5(1)SU1CVE List
Cisco Unity Connectionaffected: 12.5(1)SU2CVE List
Cisco Unity Connectionaffected: 12.5(1)SU3CVE List
Cisco Unity Connectionaffected: 12.5(1)SU4CVE List
Cisco Unity Connectionaffected: 14CVE List
Cisco Unity Connectionaffected: 12.5(1)SU5CVE List
Cisco Unity Connectionaffected: 14SU1CVE List
Cisco Unity Connectionaffected: 12.5(1)SU6CVE List
Cisco Unity Connectionaffected: 14SU2CVE List
Cisco Unity Connectionaffected: 12.5(1)SU7CVE List
Cisco Unity Connectionaffected: 14SU3CVE List
Cisco Unity Connectionaffected: 12.5(1)SU8CVE List
Cisco Unity Connectionaffected: 14SU3aCVE List
Cisco Unity Connectionaffected: 12.5(1)SU8aCVE List
Cisco Unity Connectionaffected: 15CVE List
Cisco Unity Connectionaffected: 15SU1CVE List
Cisco Unity Connectionaffected: 14SU4CVE List
Cisco Unity Connectionaffected: 12.5(1)SU9CVE List
Cisco Unity Connectionaffected: 15SU2CVE List
Cisco Unity Connectionaffected: 15SU3CVE List