Login Request a demo
CU
Product
Cisco Unified Communications Manager
by Cisco · last CVE Oct 21, 2026
On CISA KEVExploited in the wild
12
CVEs
2
On KEV
9.8
Max CVSS
9
New 30D
Vulnerabilities12In the news7Timeline
Severity mix
Critical 4High 7Medium 1Low 0
Severity
All severities12Critical4High7Medium1Low0
Exploitation
On CISA KEV2Exploited in the wild2
Watch

Add Cisco Unified Communications Manager to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-20045
In wildKEV
9.8
5%
Jan 21
Cisco Unified Communications Products Remote Code Execution Vulnerability
Affected: 12.5(1)SU2; 12.5(1)SU1; 12.5(1); 12.5(1)SU3; 12.5(1)SU4; 14; +25 more
CVE-2026-20230
In wildKEV
8.6
88%
Jun 3
Cisco Unified Communications Manager Server-Side Request Forgery Vulnerability
Affected: 14; 14SU1; 14SU2; 14SU3; 15; 15SU1; +16 more
CVE-2026-76474
New
9.8
0%
Oct 21
Cisco Unified Communications Products Hardening Release: October 2026 - Improper Authentication Vulnerabilities
Affected: 14; 14SU1; 14SU2; 14SU3; 15; 15SU1; +17 more
CVE-2026-76473
New
9.8
0%
Oct 21
Cisco Unified Communications Products Hardening Release: October 2026 - Improper control of a resource through its lifetime.
Affected: 14; 14SU1; 14SU2; 14SU3; 15; 15SU1; +17 more
CVE-2026-76475
New
9.3
0%
Oct 21
Cisco Unified Communications Products Hardening Release: October 2026 - Cross-site Scripting Vulnerabilities
Affected: 14; 14SU1; 14SU2; 14SU3; 15; 15SU1; +17 more
CVE-2026-76478
New
8.8
0%
Oct 21
Cisco Unified Communications Products Hardening Release: October 2026 - Improper Access Control Vulnerabilities
Affected: 14; 14SU1; 14SU2; 14SU3; 15; 15SU1; +17 more
CVE-2026-76476
New
8.8
0%
Oct 21
Cisco Unified Communications Products Hardening Release: October 2026 - Improper Input Validation Vulnerabilities
Affected: 14; 14SU1; 14SU2; 14SU3; 15; 15SU1; +17 more
CVE-2026-76477
New
8.8
0%
Oct 21
Cisco Unified Communications Products Hardening Release: October 2026 - Injection Vulnerabilities
Affected: 14; 14SU1; 14SU2; 14SU3; 15; 15SU1; +17 more
CVE-2022-20816
8.1
1%
Aug 10
Cisco Unified Communications Manager Arbitrary File Deletion Vulnerability
Affected: All versions, or not specified
CVE-2026-76479
New
7.8
0%
Oct 21
Cisco Unified Communications Products Hardening Release: October 2026 - Path Traversal Vulnerabilities
Affected: 14; 14SU1; 14SU2; 14SU3; 15; 15SU1; +17 more
CVE-2026-76481
New
7.5
0%
Oct 21
Cisco Unified Communications Products Hardening Release: October 2026 - Improper Check or Handling of Exceptional Conditions Vulnerabilities
Affected: 14; 14SU1; 14SU2; 14SU3; 15; 15SU1; +17 more
CVE-2026-76487
New
5.3
1%
Oct 21
Cisco Unified Communications Manager Improper Access Control Vulnerability
Affected: 14; 14SU1; 14SU2; 14SU3; 15; 15SU1; +17 more
Showing 12