Cisco Unified CM / Expressway / Webex vulnerabilities

9 advisories, 2 actively exploited. Last update: October 28, 2026.

By version: Unified CM / Expressway / Webex 15 (2) · Unified CM / Expressway / Webex 14 (2)

Running Unified CM / Expressway / Webex devices? Get an email when a new vulnerability comes out. Free, unsubscribe in one click.
Turn on Unified CM / Expressway / Webex alerts

cisco-sa-notice-I8z3n6lKOctober 28, 2026Severity n/a
Cisco Advance Notification for Publication of November 4, 2026, Security Advisories
CVE-2026-76473 +7October 27, 2026Critical 9.8
Cisco Unified Communications Products Security Hardening Release: October 2026
CVE-2026-76490 +7October 27, 2026High 8.6
Cisco Expressway Series Security Hardening Release: October 2026
CVE-2026-76466October 21, 2026Critical 9.8
Cisco Expressway Series Remote Code Execution Vulnerability
CVE-2026-20043 +12October 21, 2026Critical 9
Cisco Advance Notification for Publication of October 21, 2026, Security Advisories
CVE-2026-76435October 21, 2026Medium 5.3
Cisco Expressway Series Information Disclosure Vulnerability
CVE-2026-76487October 21, 2026Medium 5.3
Cisco Unified Communications Manager Improper Access Control Vulnerability
CVE-2026-20230June 25, 2026High 8.6Exploited
Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability
CVE-2026-20045January 21, 2026High 8.2Exploited
Cisco Unified Communications Products Code Injection Vulnerability