{"uuid": "f956a651-0f53-44c3-a5bf-9116ade06447", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://t.me/pphm_HackerNews/1623", "content": "\ud83d\udd34 Hackers Exploiting Cisco Unified CM Vulnerability\n\nCisco announced patches for the vulnerability, tracked as CVE-2026-20230. The company said the critical security hole can be exploited by an unauthenticated, remote attacker to conduct SSRF attacks, write arbitrary files to the underlying operating system, and escalate privileges to root. Exploitation requires enabling the WebDialer service, which is disabled by default.\n\nWhen it announced fixes, Cisco noted that a PoC exploit had been available, but said it was not aware of any in-the-wild exploitation.", "creation_timestamp": "2026-08-22T00:00:27.737866Z"}