CVE-2026-20059 | Cisco Unity Connection up to 15SU4 Web-based Management Interface cross site scripting (cisco-sa-unity-vulns-n2EJSbbw)

A vulnerability marked as problematic has been reported in Cisco Unity Connection up to 15SU4. Affected by this vulnerability is an unknown functionality of the component Web-based Management Interface. Performing a manipulation results in cross site scripting.

This vulnerability was named CVE-2026-20059. The attack may be initiated remotely. There is no available exploit.

It is suggested to upgrade the affected component.