Cisco patches critical Unified CM vulnerability CVE-2026-20230

Cisco patched the critical vulnerability CVE-2026-20230 in Unified CM and Unified CM SME. An unauthenticated remote attacker can use a crafted HTTP request to conduct server-side request forgery (SSRF). Public proof-of-concept (PoC) code is available, but Cisco PSIRT is not aware of malicious exploitation of the vulnerability in attacks.