Unified CM / Expressway / Webex 14 vulnerabilities

2 advisories affect Cisco Unified CM / Expressway / Webex 14, 2 already exploited by attackers. Latest: June 25, 2026.

Running Unified CM / Expressway / Webex 14 devices? Get an email when a new vulnerability comes out. Free, unsubscribe in one click.
Turn on Unified CM / Expressway / Webex 14 alerts

Vulnerability	Severity	Affected versions
Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability CVE-2026-20230 · June 25, 2026	High 8.6 Exploited	from 14.0 to before 14SU6 Fixed in 14SU6
Cisco Unified Communications Products Code Injection Vulnerability CVE-2026-20045 · January 21, 2026	High 8.2 Exploited	14 before 14SU5 Fixed in 14SU5

Affected versions are compiled automatically from vendor advisories and NVD and may contain errors. Where no fixed version is shown, you will find it in the official advisory linked from every page: check it there before updating.

Other Unified CM / Expressway / Webex versions: 15