CVE-2026-20078
CVE-2026-20078 is a medium-severity vulnerability in Cisco Unity Connection with a CVSS 3.x base score of 6.5. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-23.
Key facts
- Severity: Medium (CVSS 3.x base score 6.5)
- EPSS exploit prediction: 0% (31st percentile)
- Actively exploited: Not listed in CISA KEV
- EU (EUVD) id: EUVD-2026-22956
- Weakness: CWE-23
- Affected product: Cisco Unity Connection
- Published:
- Last modified:
Description
Multiple vulnerabilities in Cisco Unity Connection could allow an authenticated, remote attacker to download arbitrary files from an affected system. To exploit these vulnerabilities, the attacker must have valid administrative credentials. These vulnerabilities are due to improper sanitization of user input to the web-based management interface. An attacker could exploit these vulnerabilities by sending a crafted HTTPS request. A successful exploit could allow the attacker to download arbitrary files from an affected system.
Frequently asked questions
- What is CVE-2026-20078?
- Multiple vulnerabilities in Cisco Unity Connection could allow an authenticated, remote attacker to download arbitrary files from an affected system. To exploit these vulnerabilities, the attacker must have valid administrative credentials. These vulnerabilities are due to improper sanitization of user input to the web-based management interface. An attacker could exploit these vulnerabilities by sending a crafted HTTPS request. A successful exploit could allow the attacker to download arbitrary files from an affected system.
- How severe is CVE-2026-20078?
- CVE-2026-20078 has a CVSS 3.x base score of 6.5, rated medium severity. It is exploitable over network with low attack complexity, requires low privileges and no user interaction. Impact on confidentiality is high, integrity none, and availability none.
- Is CVE-2026-20078 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (31st percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2026-20078?
- CVE-2026-20078 primarily affects Cisco Unity Connection. In total, 12 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
- How do I fix CVE-2026-20078?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- Does CVE-2026-20078 have an EU (EUVD) identifier?
- Yes. CVE-2026-20078 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2026-22956.
- When was CVE-2026-20078 published?
- CVE-2026-20078 was published on 2026-04-15 and last updated on 2026-06-17.
References
Affected products (12)
- cpe:2.3:a:cisco:unity_connection:*:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:unity_connection:14.0:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:unity_connection:14su1:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:unity_connection:14su2:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:unity_connection:14su3:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:unity_connection:14su3a:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:unity_connection:14su4:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:unity_connection:14su5:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:unity_connection:15.0:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:unity_connection:15su1:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:unity_connection:15su2:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:unity_connection:15su3:*:*:*:*:*:*:*
More vulnerabilities in Cisco Unity Connection
- CVE-2021-44228 — Critical (CVSS 10.0): Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in…
- CVE-2024-20253 — Critical (CVSS 9.9): A vulnerability in multiple Cisco Unified Communications and Contact Center Solutions products could allow an…
- CVE-2017-12337 — Critical (CVSS 9.8): A vulnerability in the upgrade mechanism of Cisco collaboration products based on the Cisco Voice Operating System…
- CVE-2014-3333 — Critical (CVSS 9.0): The server in Cisco Unity Connection 9.1(1) and 9.1(2) allows remote authenticated users to obtain privileged access by…
- CVE-2012-0366 — Critical (CVSS 9.0): Cisco Unity Connection before 7.1.3b(Su2) allows remote authenticated users to change the administrative password by…
- CVE-2026-20034 — High (CVSS 8.8): A vulnerability in the web-based management interface of Cisco Unity Connection could allow an authenticated, remote…
All CVEs affecting Cisco Unity Connection →
Other CWE-23 vulnerabilities
- CVE-2026-52813 — Critical (CVSS 10.0): Gogs is an open source self-hosted Git service. Prior to 0.14.3, organization names containing path traversal sequences…
- CVE-2026-8326 — Critical (CVSS 10.0): Path traversal vulnerability in Remote Spark (https://www.Remotespark.Com/) SparkView allows reading and writing…
- CVE-2026-33494 — Critical (CVSS 10.0): ORY Oathkeeper is an Identity & Access Proxy (IAP) and Access Control Decision API that authorizes HTTP requests based…
- CVE-2023-3941 — Critical (CVSS 10.0): Relative Path Traversal vulnerability in ZkTeco-based OEM devices allows an attacker to write any file on the system…
- CVE-2024-24578 — Critical (CVSS 10.0): RaspberryMatic is an open-source operating system for HomeMatic internet-of-things devices. RaspberryMatic / OCCU prior…
- CVE-2012-6069 — Critical (CVSS 10.0): The CoDeSys Runtime Toolkit’s file transfer functionality does not perform input validation, which allows an…