Cisco Unified CM Zero-Day RCE Under Attack, CISA Issues Warning

CISA added CVE-2026-20045 — a critical code-injection RCE in Cisco Unified Communications Manager and related products — to its Known Exploited Vulnerabilities catalog; public reports indicate active exploitation permitting initial user-level access and escalation to root. Organizations are urged to apply Cisco’s patches or mitigations (deadline Feb 11, 2026) and monitor for suspicious API calls, anomalous processes, and management-port traffic to reduce risk of full system compromise, data exfiltration, or ransomware.