CISA Warns of Cisco Unified CM Vulnerability Exploited in Attacks

**Executive summary:** CISA has added CVE-2026-20230 — a critical unauthenticated SSRF in Cisco Unified Communications Manager that can write arbitrary files and enable root escalation — to its Known Exploited Vulnerabilities catalog, warns of active exploitation in the wild, and orders immediate remediation and forensic triage under a tight deadline.