CU
Product
Cisco Unity Connection
by Cisco · last CVE Oct 21, 2026
On CISA KEVExploited in the wild
17
CVEs
1
On KEV
9.8
Max CVSS
8
New 30D
Severity mix
Critical 4High 7Medium 6Low 0
Watch

Add Cisco Unity Connection to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-20061
6.5
0%
Apr 15
Cisco Unity Connection SQL Injection Vulnerability
Affected: 14; 14SU1; 14SU2; 14SU3; 14SU3a; 15; +5 more
CVE-2026-20081
6.5
0%
Apr 15
Cisco Unity Connection Arbitrary File Download Vulnerability
Affected: 12.5(1); 12.5(1)SU1; 12.5(1)SU2; 12.5(1)SU3; 12.5(1)SU4; 14; +16 more
CVE-2026-20078
6.5
0%
Apr 15
Cisco Unity Connection Arbitrary File Download Vulnerability
Affected: 12.5(1); 12.5(1)SU1; 12.5(1)SU2; 12.5(1)SU3; 12.5(1)SU4; 14; +16 more
CVE-2026-20059
6.1
0%
Apr 15
Cisco Unity Connection Reflected Cross-Site Scripting Vulnerability
Affected: 14; 14SU1; 14SU2; 14SU3; 14SU3a; 15; +6 more
CVE-2019-1685
6.1
1%
Feb 21
Cisco Unity Connection Reflected Cross-Site Scripting Vulnerability
Affected: 12.5
CVE-2026-20060
4.7
0%
Apr 15
Cisco Unity Connection Open Redirect Vulnerability
Affected: 14; 14SU1; 14SU2; 14SU3; 14SU3a; 15; +4 more
Showing 6