Cisco Unified Communications 0-day RCE Vulnerability Exploited in the Wild to Gain Root Access

Cisco disclosed a critical zero-day RCE (CVE-2026-20045) affecting multiple Unified Communications products, allowing unauthenticated attackers to send crafted HTTP requests to the web management interface to execute commands and escalate to root. Cisco PSIRT confirmed active exploitation, released patches for affected releases, noted no workarounds, and urged immediate patching and network access restrictions; CISA added it to the Known Exploited Vulnerabilities catalog.