CVE-2026-20045

Think of this as a “remote keyboard” vulnerability in Cisco’s phone/voice management systems. An attacker can send specially made web requests to the server and cause it to run commands, potentially gaining full control. For a small business, that can mean your voice/communications system is compromised, stopped, or manipulated by an attacker.

This matters if your business runs or hosts Cisco Unified Communications systems such as Unified Communications Manager, Unified Communications Manager IM and Presence Service, Cisco Unity Connection, Unified Communications Manager SME, or Webex Calling Dedicated Instance.

The vulnerability does not require login or user interaction, so the key question is whether the affected web management interface is reachable from the network an attacker can reach (for example, over the internet or any exposed network path). If that management interface is reachable, you should assume it’s a real risk and act quickly.

RED. CISA added CVE-2026-20045 to its Known Exploited Vulnerabilities list, and exploitation has been reported, meaning attackers are actively targeting systems like these. Because the flaw allows remote command execution without authentication and can escalate to root, you should treat it as an urgent patching event.