CVE-2026-20045: Technical Deep-Dive (Auto Refreshed)

Generated on 2026-03-23T21:42:43.236Z. This file is automatically regenerated every 30 minutes by the CVE AI enrichment job using web sources (NVD, MITRE, CISA KEV, GitHub).

Executive Technical Summary

A vulnerability in Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Unity Connection, and Cisco Webex Calling Dedicated Instance could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device.  This vulnerability is due to improper validation of user-supplied input in HTTP requests. An attacker could exploit this vulnerability by sending a sequence of crafted HTTP requests to the web-based management interface of an affected device. A successful exploit could allow the attacker to obtain user-level access to the underlying operating system and then elevate privileges to root.  Note: Cisco has assigned this security advisory a Security Impact Rating (SIR) of Critical rather than High as the score indicates. The reason is that exploitation of this vulnerability could result in an attacker elevating privileges to root.

• Context preserved from previous revision: A vulnerability in Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Unity Connection, and Cisco Webex Calling Dedicated Instance could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device.  This vulnerability is due to improper validation of user-supplied input in HTTP requests. An attacker could exploit this vulnerability by sending a sequence of crafted HTTP requests to the web-based management interface of an affected device. A successful exploit could allow the attacker to obtain user-level access to the underlying operating system and then elevate privileges to root.  Note: Cisco has assigned this security advisory a Security Impact Rating (SIR) of Critical rather than High as the score indicates. The reason is that exploitation of this vulnerability could result in an attacker elevating privileges to root. Notes: 📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.

Technical Details

• CVE: CVE-2026-20045
• KEV date added: 2026-01-21
• KEV due date: 2026-02-11
• NVD published: 2026-01-21
• NVD modified: 2026-02-14
• MITRE modified: 2026-02-26
• CVSS base score: 8.2
• CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
• CVSS exploitability score: 3.9
• CVSS impact score: 4.2
• Attack vector: Network
• Attack complexity: Low
• Privileges required: None
• User interaction: None
• Scope: Unchanged
• Confidentiality impact: High
• Integrity impact: Low
• Availability impact: None

Versions and Products Impacted

• cisco / unified communications manager (versions: >= 12.5, < 14su5)
• cisco / unified communications manager (versions: >= 15.0, <= 15su3a)
• cisco / unified communications manager im and presence service (versions: >= 12.5, < 14su5)
• cisco / unified communications manager im and presence service (versions: >= 15.0, <= 15su3a)
• cisco / unity connection (versions: >= 12.5, < 14su5)
• cisco / unity connection (versions: >= 15.0, <= 15su3)
• Cisco / Cisco Unified Communications Manager (versions: 12.5(1)SU2, 12.5(1)SU1, 12.5(1), 12.5(1)SU3, 12.5(1)SU4, 14, 12.5(1)SU5, 14SU1, 12.5(1)SU6, 14SU2)
• Cisco / Cisco Unified Communications Manager IM and Presence Service (versions: 12.5(1), 12.5(1)SU1, 12.5(1)SU2, 12.5(1)SU3, 12.5(1)SU4, 14, 12.5(1)SU5, 14SU1, 12.5(1)SU6, 14SU2)
• Cisco / Cisco Unity Connection (versions: 12.5(1), 12.5(1)SU1, 12.5(1)SU2, 12.5(1)SU3, 12.5(1)SU4, 14, 12.5(1)SU5, 14SU1, 12.5(1)SU6, 14SU2)

Weakness Classification

• CWE-94

Repositories for Lab Validation (Public Examples)

• nomi-sec/PoC-in-GitHub | stars: 7594 | updated: 2026-03-23 | https://github.com/nomi-sec/PoC-in-GitHub
  Notes: 📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.
• 0xMarcio/cve | stars: 1177 | updated: 2026-03-23 | https://github.com/0xMarcio/cve
  Notes: Latest CVEs with their Proof of Concept exploits.
• DarkFunct/TK-CVE-Repo | stars: 43 | updated: 2026-03-23 | https://github.com/DarkFunct/TK-CVE-Repo
  Notes: TK-CVE-Repo

People and Organizations Mentioned

• cisco
• Unified Communications Manager
• nomi-sec
• 0xMarcio
• DarkFunct

Practical Defensive Validation (Authorized Only)

1. Use only isolated environments and systems you own or are explicitly authorized to test.
2. Snapshot infrastructure before validation and preserve baseline logs (EDR, SIEM, OS, app).
3. Inventory cisco / unified communications manager (versions: >= 12.5, < 14su5) assets and confirm exact vulnerable versions with automated checks.
4. Patch in staged environments and validate closure with scanners + service health checks.
5. Map detections to MITRE ATT&CK tactics relevant to your environment and tune alert quality.

References

• NVD record: https://nvd.nist.gov/vuln/detail/CVE-2026-20045
• MITRE CVE record: https://www.cve.org/CVERecord?id=CVE-2026-20045
• CISA KEV Catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog
• CISA KEV JSON feed: https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json
• KEV notes: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-voice-rce-mORhqY4b ; https://nvd.nist.gov/vuln/detail/CVE-2026-20045
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-voice-rce-mORhqY4b
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-20045
• Repository example: https://github.com/nomi-sec/PoC-in-GitHub
• Repository example: https://github.com/0xMarcio/cve
• Repository example: https://github.com/DarkFunct/TK-CVE-Repo

This content is for defensive security training and authorized validation only.