isco has disclosed a critical remote code execution vulnerability affecting multiple Unified Communications products. The issue is tracked as CVE-2026-20045 and has been actively exploited in the wild. Cisco’s advisory confirms that several core components within the Unified Communications suite are impacted, including Unified CM, Unified CM Session Management Edition, Unified CM IM & Presence, Unity Connection, and Webex Calling Dedicated Instance.
Affected Products:
- Cisco Unified Communications Manager (Unified CM)
- Cisco Unified Communications Manager Session Management Edition (Unified CM SME)
- Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P)
- Cisco Unity Connection
- Cisco Webex Calling Dedicated Instance
Technical details for CVE-2026-20045
The vulnerability arises from improper validation of user-supplied input within the affected services. An unauthenticated remote attacker may exploit the flaw by sending crafted requests to exposed service interfaces. Successful exploitation allows arbitrary command execution on the underlying operating system, providing full control of the targeted system, as described by Cisco:
A successful exploit could allow the attacker to obtain user-level access to the underlying operating system and then elevate privileges to root
Public reporting, including Cisco’s advisory, indicates no workarounds are available and exploitation requires only network access to affected services.
How this affects Cisco Unified CM users
A successful attack can compromise confidentiality, integrity, and availability of Unified Communications infrastructure. From a technical perspective, the attacker can execute arbitrary commands, escalate privileges, and potentially pivot deeper into the environment.
For organisations who are relying on Unified Communications for telephony, conferencing, and presence services, disruption could affect business operations, internal communications, and regulatory obligations. A remote code execution flaw in core communication systems presents heightened risk because service availability is often considered business-critical.
Mitigation for CVE-2026-20045
Cisco has released software updates addressing the vulnerability. There are no alternative workarounds, making timely patching essential. Administrators should review Cisco’s advisory and apply the fixed software versions immediately. Given active exploitation, prioritising affected Unified Communications systems is highly recommended.
How Sentrium can help
Sentrium can support organisations assessing the impact of this vulnerability through targeted penetration testing, configuration reviews, and rapid security assessments. Our consultants provide guidance on secure deployment, network segmentation, and resilience strategies for communications infrastructure. We offer independent assessment of system patching, and can help strengthen long-term security maturity in complex networks, with deep experience in enterprise communications and telecommunications environments.
