CVE-2026-20045 | Cisco Unified Communications Manager code injection (cisco-sa-voice-rce-mORhqY4b)

A vulnerability classified as critical has been found in Cisco Unified Communications Manager, Unified Communications Manager Session Management Edition, Unified Communications Manager IM & Presence Service, Unity Connection and Webex Calling Dedicated Instance. This issue affects some unknown processing. Performing a manipulation results in code injection.

This vulnerability is cataloged as CVE-2026-20045. It is possible to initiate the attack remotely. There is no exploit available.

It is recommended to upgrade the affected component.