CU
Product
Cisco Unified Communications Manager
On CISA KEVExploited in the wild
24
CVEs
2
On KEV
10.0
Max CVSS
9
New 30D
Severity mix
Critical 6High 10Medium 8Low 0
Watch
Add Cisco Unified Communications Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-20045 In wildKEV | 9.8 | Jan 21 | Cisco Unified Communications Products Remote Code Execution Vulnerability Affected: 12.5(1)SU2; 12.5(1)SU1; 12.5(1); 12.5(1)SU3; 12.5(1)SU4; 14; +25 more |
| CVE-2025-20309 | 10.0 | Jul 2 | Cisco Unified Communications Manager Static SSH Credentials Vulnerability Affected: 15.0.1.13010-1; 15.0.1.13011-1; 15.0.1.13012-1; 15.0.1.13013-1; 15.0.1.13014-1; 15.0.1.13015-1; +2 more |
| CVE-2024-20253 | 10.0 | Jan 26 | A vulnerability in multiple Cisco Unified Communications and Contact Center Solutions products could allow an unauthenticated, remote attacker to execute arbitrary code on an… Affected: 12.0(1)SU1; 12.0(1)SU2; 12.0(1)SU3; 12.0(1)SU4; 12.0(1)SU5; 12.5(1); +11 more |
| CVE-2026-76474 | 9.8 | Oct 21 | Cisco Unified Communications Products Hardening Release: October 2026 - Improper Authentication Vulnerabilities Affected: 14; 14SU1; 14SU2; 14SU3; 15; 15SU1; +17 more |
| CVE-2026-76473 | 9.8 | Oct 21 | Cisco Unified Communications Products Hardening Release: October 2026 - Improper control of a resource through its lifetime. Affected: 14; 14SU1; 14SU2; 14SU3; 15; 15SU1; +17 more |
| CVE-2026-76475 | 9.3 | Oct 21 | Cisco Unified Communications Products Hardening Release: October 2026 - Cross-site Scripting Vulnerabilities Affected: 14; 14SU1; 14SU2; 14SU3; 15; 15SU1; +17 more |
Showing 6