Unified CM / Expressway / Webex 15 vulnerabilities
2 advisories affect Cisco Unified CM / Expressway / Webex 15, 2 already exploited by attackers. Latest: June 25, 2026.
Running Unified CM / Expressway / Webex 15 devices? Get an email when a new vulnerability comes out. Free, unsubscribe in one click.
Turn on Unified CM / Expressway / Webex 15 alerts
Turn on Unified CM / Expressway / Webex 15 alerts
| Vulnerability | Severity | Affected versions |
|---|---|---|
| Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability CVE-2026-20230 · June 25, 2026 | High 8.6 Exploited | from 15.0 to 15SU4a |
| Cisco Unified Communications Products Code Injection Vulnerability CVE-2026-20045 · January 21, 2026 | High 8.2 Exploited | from 15.0 to 15SU3a; from 15.0 to 15SU3 |
Affected versions are compiled automatically from vendor advisories and NVD and may contain errors. Where no fixed version is shown, you will find it in the official advisory linked from every page: check it there before updating.
Other Unified CM / Expressway / Webex versions: 14