CU
Product
Cisco Unity Connection
On CISA KEVExploited in the wild
23
CVEs
1
On KEV
10.0
Max CVSS
8
New 30D
Severity mix
Critical 6High 8Medium 10Low 0
Watch
Add Cisco Unity Connection to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-20045 In wildKEV | 9.8 | Jan 21 | Cisco Unified Communications Products Remote Code Execution Vulnerability Affected: 12.5(1); 12.5(1)SU1; 12.5(1)SU2; 12.5(1)SU3; 12.5(1)SU4; 14; +15 more |
| CVE-2024-20253 | 10.0 | Jan 26 | A vulnerability in multiple Cisco Unified Communications and Contact Center Solutions products could allow an unauthenticated, remote attacker to execute arbitrary code on an… Affected: 12.0(1)SU1; 12.0(1)SU2; 12.0(1)SU3; 12.0(1)SU4; 12.0(1)SU5; 12.5(1); +10 more |
| CVE-2026-76474 | 9.8 | Oct 21 | Cisco Unified Communications Products Hardening Release: October 2026 - Improper Authentication Vulnerabilities Affected: 14; 14SU1; 14SU2; 14SU3; 14SU3a; 15; +7 more |
| CVE-2026-76473 | 9.8 | Oct 21 | Cisco Unified Communications Products Hardening Release: October 2026 - Improper control of a resource through its lifetime. Affected: 14; 14SU1; 14SU2; 14SU3; 14SU3a; 15; +7 more |
| CVE-2024-20272 | 9.8 | Jan 17 | A vulnerability in the web-based management interface of Cisco Unity Connection could allow an unauthenticated, remote attacker to upload arbitrary files to an affected system and… Affected: 12.0(1)SU1; 12.0(1)SU2; 12.0(1)SU3; 12.0(1)SU4; 12.0(1)SU5; 12.5(1); +14 more |
| CVE-2026-76475 | 9.3 | Oct 21 | Cisco Unified Communications Products Hardening Release: October 2026 - Cross-site Scripting Vulnerabilities Affected: 14; 14SU1; 14SU2; 14SU3; 14SU3a; 15; +7 more |
Showing 6