Research · Jan 21, 2026 · ZeroDay Catalog
Critical Code Injection Vulnerability in Cisco Unified Communications Products
A serious code injection vulnerability has been identified in multiple Cisco Unified Communications products, allowing remote attackers to execute arbitrary commands.
What changed
A newly discovered vulnerability in Cisco Unified Communications Manager and related products poses a significant risk, enabling unauthorized remote command execution. This flaw arises from inadequate validation of user-supplied input in HTTP requests, which can be exploited by attackers.
The vulnerability affects various Cisco Unified Communications products, making it critical for organizations using these systems to assess their security posture.
Who is affected
Organizations utilizing Cisco Unified Communications products are at risk. The following products are specifically impacted:
Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Unity Connection, and Cisco Webex Calling Dedicated Instance.
- Cisco Unified Communications Manager (Unified CM)
- Cisco Unified Communications Manager Session Management Edition (Unified CM SME)
- Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P)
- Cisco Unity Connection
What to do
Affected organizations should take immediate action to mitigate the risks associated with this vulnerability. It is advisable to monitor for any unusual activity and apply any available patches or updates from Cisco as soon as they are released.
Additionally, reviewing security configurations and implementing strict access controls can help reduce the attack surface.
- Monitor systems for unusual activity.
- Apply patches and updates from Cisco promptly.
- Review and strengthen security configurations.
- Implement strict access controls to limit exposure.