Cisco Unity Connection vulnerabilities | LiveThreat CVE Feed

Product

Cisco Unity Connection

by Cisco · last CVE Oct 21, 2026

On CISA KEVExploited in the wild

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities17 In the news0 Timeline

Severity mix

Critical 4High 7Medium 6Low 0

Severity

All severities17 Critical4 High7 Medium6 Low0

Exploitation

On CISA KEV1 Exploited in the wild1

Watch

Add Cisco Unity Connection to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-20045 In wildKEV	9.8	5%	Jan 21	Cisco Unified Communications Products Remote Code Execution Vulnerability Affected: 12.5(1); 12.5(1)SU1; 12.5(1)SU2; 12.5(1)SU3; 12.5(1)SU4; 14; +15 more
CVE-2026-76474 New	9.8	0%	Oct 21	Cisco Unified Communications Products Hardening Release: October 2026 - Improper Authentication Vulnerabilities Affected: 14; 14SU1; 14SU2; 14SU3; 14SU3a; 15; +7 more
CVE-2026-76473 New	9.8	0%	Oct 21	Cisco Unified Communications Products Hardening Release: October 2026 - Improper control of a resource through its lifetime. Affected: 14; 14SU1; 14SU2; 14SU3; 14SU3a; 15; +7 more
CVE-2026-76475 New	9.3	0%	Oct 21	Cisco Unified Communications Products Hardening Release: October 2026 - Cross-site Scripting Vulnerabilities Affected: 14; 14SU1; 14SU2; 14SU3; 14SU3a; 15; +7 more
CVE-2026-76478 New	8.8	0%	Oct 21	Cisco Unified Communications Products Hardening Release: October 2026 - Improper Access Control Vulnerabilities Affected: 14; 14SU1; 14SU2; 14SU3; 14SU3a; 15; +7 more
CVE-2026-76476 New	8.8	0%	Oct 21	Cisco Unified Communications Products Hardening Release: October 2026 - Improper Input Validation Vulnerabilities Affected: 14; 14SU1; 14SU2; 14SU3; 14SU3a; 15; +7 more
CVE-2026-76477 New	8.8	0%	Oct 21	Cisco Unified Communications Products Hardening Release: October 2026 - Injection Vulnerabilities Affected: 14; 14SU1; 14SU2; 14SU3; 14SU3a; 15; +7 more
CVE-2026-20034	8.8	1%	May 6	Cisco Unity Connection Remote Code Execution Vulnerability Affected: 12.5(1); 12.5(1)SU1; 12.5(1)SU2; 12.5(1)SU3; 12.5(1)SU4; 14; +15 more
CVE-2026-76479 New	7.8	0%	Oct 21	Cisco Unified Communications Products Hardening Release: October 2026 - Path Traversal Vulnerabilities Affected: 14; 14SU1; 14SU2; 14SU3; 14SU3a; 15; +7 more
CVE-2026-76481 New	7.5	0%	Oct 21	Cisco Unified Communications Products Hardening Release: October 2026 - Improper Check or Handling of Exceptional Conditions Vulnerabilities Affected: 14; 14SU1; 14SU2; 14SU3; 14SU3a; 15; +7 more
CVE-2026-20035	7.2	0%	May 6	Cisco Unity Connection Server-Side Request Forgery Vulnerability Affected: 12.5(1); 12.5(1)SU1; 12.5(1)SU2; 12.5(1)SU3; 12.5(1)SU4; 14; +15 more
CVE-2026-20061	6.5	0%	Apr 15	Cisco Unity Connection SQL Injection Vulnerability Affected: 14; 14SU1; 14SU2; 14SU3; 14SU3a; 15; +5 more
CVE-2026-20081	6.5	0%	Apr 15	Cisco Unity Connection Arbitrary File Download Vulnerability Affected: 12.5(1); 12.5(1)SU1; 12.5(1)SU2; 12.5(1)SU3; 12.5(1)SU4; 14; +16 more
CVE-2026-20078	6.5	0%	Apr 15	Cisco Unity Connection Arbitrary File Download Vulnerability Affected: 12.5(1); 12.5(1)SU1; 12.5(1)SU2; 12.5(1)SU3; 12.5(1)SU4; 14; +16 more
CVE-2026-20059	6.1	0%	Apr 15	Cisco Unity Connection Reflected Cross-Site Scripting Vulnerability Affected: 14; 14SU1; 14SU2; 14SU3; 14SU3a; 15; +6 more
CVE-2019-1685	6.1	1%	Feb 21	Cisco Unity Connection Reflected Cross-Site Scripting Vulnerability Affected: 12.5
CVE-2026-20060	4.7	0%	Apr 15	Cisco Unity Connection Open Redirect Vulnerability Affected: 14; 14SU1; 14SU2; 14SU3; 14SU3a; 15; +4 more