Cisco Patches Critical Unified Communications Manager Flaw As Proof-of-Concept Exploit Emerges

Cisco has released emergency security updates to address a critical vulnerability in its Unified Communications Manager (Unified CM) platform that could allow remote attackers to ultimately gain root-level access to affected systems, raising concerns among enterprise security teams responsible for voice and collaboration infrastructure.

The flaw, tracked as CVE-2026-20230, affects Cisco Unified CM, the company’s flagship enterprise call-control platform used by organizations worldwide to manage IP telephony, voice communications, call routing, conferencing services, and unified communications infrastructure. Security researchers and Cisco’s own Product Security Incident Response Team (PSIRT) warn that publicly available proof-of-concept (PoC) exploit code has already surfaced, potentially lowering the barrier to exploitation for threat actors.