Webdialer

Cisco Unified CM CVE-2026-20230: Public PoC Turns an SSRF Into Root

An unauthenticated SSRF in Cisco Unified Communications Manager (CVE-2026-20230) lets attackers write files to the OS and climb to root. PoC code is public, the 15-train fix is months out, and there's no workaround beyond disabling WebDialer.