logo

U.S. CISA adds a flaw in Cisco Unified Communications products to its Known Exploited Vulnerabilities catalog

ID: 344d5c51-20c7-5275-a486-d6dc78b4e1c0

STIX ID: report--344d5c51-20c7-5275-a486-d6dc78b4e1c0

Feed Name: Security Affairs

Threat Score
85/100

Date Published: 2026-01-22

Date Updated: 2026-04-22

Author: Pierluigi Paganini

...
...

CISA added CVE-2026-20045 — a critical (CVSS 8.2) unauthenticated remote-code-execution zero-day in Cisco Unified Communications products — to its Known Exploited Vulnerabilities catalog after Cisco confirmed active exploitation; Cisco released version-specific patches, stated there are no workarounds, and CISA directed federal agencies to remediate by February 11, 2026.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.