This report was translated by AI; nobody has reviewed the translation yet. Original language: Czech.

[TLP:CLEAR] Cisco fixes 3 vulnerabilities

Cisco fixes 3 vulnerabilities in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME), Cisco Webex Meetings and Cisco Finesse [1][2][3]. Fixed versions of the individual products: Cisco Unified CM and Unified CM SME - 14SU6, 15SU5 (September 2026) or COP [1] Cisco Webex Meetings - fixed in the cloud service [2] Cisco Finesse - 15.0(1)SU1 [3]

Cisco Unified Communications Manager - SSRF (CVE-2026-20230)
CVSS 8.6 (High)

An unauthenticated remote attacker can perform an SSRF attack and write files to the underlying operating system, which can subsequently be abused to escalate privileges to root, due to insufficient input validation of specific HTTP requests in Cisco Unified CM and Unified CM SME. The vulnerability is only exploitable if the WebDialer service, which is disabled by default, is enabled [1].

The vulnerability is present in product:

  • Cisco Unified CM a Unified CM SME; >=14, <14SU6; >=15, <15SU5 (Sep 2026)

CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N/E:X/RL:X/RC:X

More information:

The vulnerability was publicly disclosed 3. 6. 2026.

Cisco Webex Meetings - XSS (CVE-2026-20233)
CVSS 6.1 (Medium)

An unauthenticated remote attacker can perform an XSS attack after persuading a user to open a malicious link due to insufficient validation of user input in the Cisco Webex Meetings web interface [2].

The vulnerability is present in product:

  • Cisco Webex Meetings;

CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:X/RL:X/RC:X

More information:

  • CVE-2026-20233 at cve.org, NVD
  • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') at cwe.mitre.org

The vulnerability was publicly disclosed 3. 6. 2026.

Cisco Finesse - remote file inclusion (CVE-2026-20175)
CVSS 6.1 (Medium)

An unauthenticated remote attacker can, after persuading a user to open a crafted link, load arbitrary remote files into the active session and execute arbitrary script code or obtain sensitive information due to insufficient validation of user input in HTTP requests in Cisco Finesse [3].

The vulnerability is present in product:

  • Cisco Finesse; <15.0(1)SU1

CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:X/RL:X/RC:X

More information:

The vulnerability was publicly disclosed 3. 6. 2026.

By CESNET, z.s.p.o. Michaela Jarošová on 4. 6. 2026.

CESNET, z.s.p.o. Logo