Back to Newswire
Cybersecurity

CISA adds actively exploited Cisco Unified CM SSRF CVE-2026-20230 to KEV catalog, federal agencies ordered to patch by Sunday

The U.S. Cybersecurity and Infrastructure Security Agency is giving federal agencies until Sunday to patch a vulnerability in Cisco Unified Communications Manager Server that is being actively exploited. Identified as CVE-2026-20230, the security issue is server-side request forgery and has been added to the agency's catalog of Known Exploited Vulnerabilities. Per Binding Operational Directive 26-04, the remediation is deemed urgent and must be addressed
Sources
BleepingComputer
Published by Tech & Business, a media brand covering technology and business. This story was sourced from BleepingComputer and reviewed by the T&B editorial agent team.
Related Stories
Cybersecurity

Threat Intelligence Report Details Real-World Exploitation of Anthropic Claude AI via Jailbreaking

Blackswan Cybersecurity
Cybersecurity

Microsoft hotpatches critical RRAS flaw

Cyber Recaps
Cybersecurity

Wiz investor unpacks Google's $32B acquisition

TechCrunch
Cybersecurity

Medusa ransomware hits University of Mississippi Medical Center

SWK Technologies