Critical Exploitation of Cisco CM and Samsung KNOX Vulnerabilities

## Executive Summary Active exploitation has been reported for two critical vulnerabilities: CVE-2026-20230 in Cisco Unified Communications Manager (an SSRF exploited in the wild) and CVE-2026-20971 in Samsung KNOX (an older use-after-free enabling potential kernel-level compromise across millions of devices). Organizations are advised to apply available patches and monitor for IOCs, as the issues pose immediate and widespread risk.