CVE-2026-20045
HIGH 8.2A vulnerability in Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Unity Connection, and Cisco Webex Calling Dedicated Instance could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device.
This vulnerability is due to improper validation of user-supplied input in HTTP requests. An attacker could exploit this vulnerability by sending a sequence of crafted HTTP requests to the web-based management interface of an affected device. A successful exploit could allow the attacker to obtain user-level access to the underlying operating system and then elevate privileges to root.
Note: Cisco has assigned this security advisory a Security Impact Rating (SIR) of Critical rather than High as the score indicates. The reason is that exploitation of this vulnerability could result in an attacker elevating privileges to root.
Affected Applications in Environment
104
Webex
v43.10.0.28042
44 devices
Webex
v45.8.0.32875 (32875)
7 devices
Webex
v46.3.0.34324 (34324)
2 devices
Webex
v43.6.0.26407
9 devices
Webex
v42.4.1.22032
1 device
Webex
v46.3.1.34493 (34493)
1 device
Webex
v43.9.0.27194
4 devices
Webex
v45.2.0.31822 (31822)
2 devices
Webex
v43.10.0.28042 (28042)
7 devices
Webex
v43.2.0.25211 (25211)
4 devices
Webex
v44.5.0.29672
1 device
Webex
v42.8.0.23214
1 device
Webex
v43.7.0.26612
3 devices
Webex
v45.9.0.33085 (33085)
3 devices
Webex
v45.11.0.33441 (33441)
1 device
Webex
v45.3.1.32057 (32057)
2 devices
Webex
v45.4.0.32158 (32158)
2 devices
Webex
v44.10.1.31028 (31028)
1 device
Webex
v43.10.0.27451 (27451)
4 devices
Webex
v44.2.0.28859
1 device
Webex
v44.12.0.31359
1 device
Webex
v43.4.0.25959
3 devices
Webex
v43.3.0.25468
1 device
Webex
v45.1.0.31549 (31549)
1 device
Webex
v43.10.0.27451
1 device
Webex
v44.7.0.30141
2 devices
Webex
v41.3.0.18191
2 devices
Webex
v44.1.0.28423
1 device
Webex
v43.4.0.25788
2 devices
Webex
v41.8.0.19732 (19732)
1 device
Webex
v43.1.0.24716
2 devices
Webex
v43.5.0.26155
3 devices
Webex
v46.1.0.33913 (33913)
1 device
Webex
v46.2.1.34187 (34187)
2 devices
Webex
v43.2.0.25211
3 devices
Webex
v21.23.0.34324
1 device
Webex
v43.11.0.27795
1 device
Webex
v46.2.1.34187
1 device
Webex
v45.12.0.33788 (33788)
1 device
Webex
v45.6.1.32593
1 device
Webex
v45.10.0.33260 (33260)
1 device
Webex
v44.4.0.29298
1 device
Webex
v44.2.0.28859 (28859)
1 device
Webex
v45.7.0.32689 (32689)
1 device
Webex
v42.12.0.24485
1 device
Webex
v43.1.0.24716 (24716)
1 device
Webex
v46.1.0.33913
1 device
Webex
v41.2.0.17979
1 device
Webex
v44.6.0.29928
1 device
Webex Meetings
v10044,9,2024,0901
4 devices
Webex Meetings
v10055,4506,2025,0916
2 devices
Webex Meetings
v40.12.4.7 (40.12.4-2020-12-01)
1 device
Webex Meetings
v10045,2,2025,0402
3 devices
Webex Meetings
v10052,4204,2022,0331
1 device
Webex Meetings
v2800.3114.1704.1801
2 devices
Webex Meetings
v10044,6,2024,0511
7 devices
Webex Meetings
v10043,11,2023,1112
2 devices
Webex Meetings
v10045,2,2025,0331
1 device
Webex Meetings
v41.6.6.14 (41.6.6-2021-06-26)
1 device
Webex Meetings
v10044,10,2024,1014
8 devices
Webex Meetings
v10045,6,2025,1214
35 devices
Webex Meetings
v10056,4506,2025,1214
11 devices
Webex Meetings
v10045,2,2024,1225
11 devices
Webex Meetings
v10043,8,2023,0627
2 devices
Webex Meetings
v10044,4,2024,0401
4 devices
Webex Meetings
v39.8.2.895
2 devices
Webex Meetings
v10045,6,2025,0717
7 devices
Webex Meetings
v40.2.14.19 (40.2.14-2020-04-09)
1 device
Webex Meetings
v40.4.12.8 (40.4.12-2020-06-04)
1 device
Webex Meetings
v10045,6,2025,0528
2 devices
Webex Meetings
v10045,2,2025,0717
2 devices
Webex Meetings
v40.2.18.5
1 device
Webex Meetings
v10043,10,2023,1019
1 device
Webex Meetings
v10052,41,2021,1105
4 devices
Webex Meetings
v10043,12,2023,1130
2 devices
Webex Meetings
v45.6.1.7 (45.6.1-2025-07-18)
1 device
Webex Meetings
v10051,4107,2021,0706
2 devices
Webex Meetings
v41.11.5.8 (41.11.5-2021-11-05)
1 device
Webex Meetings
v41.3.3.8 (41.3.3-2021-03-04)
1 device
Webex Meetings
v10052,4112,2021,1202
1 device
Webex Meetings
v10051,4108,2021,0730
1 device
Webex Meetings
v10052,4204,2022,0415
1 device
Webex Meetings
v10043,5,2023,0330
1 device
Webex Meetings
v10044,7,2024,0718
1 device
Webex Meetings
v41.9.5
1 device
Webex Meetings
v10052,41,2021,1029
4 devices
Webex Meetings
v10051,4107,2021,0609
1 device
Webex Meetings
v44.4.0.159
1 device
Webex Meetings
v43.4.3.10 (43.4.3-2023-03-30)
1 device
Webex Meetings
v10045,6,2025,0916
3 devices
Webex Meetings
v10043,12,2023,1220
2 devices
Webex Meetings
v10050,1,2020,0131
1 device
Webex Meetings
v10055,4502,2025,0717
2 devices
Webex Meetings
v2800.2900.1602.2201
1 device
Webex Meetings
v40.2.14.19
1 device
Webex Meetings
v41.8.8.15 (41.8.8-2021-09-03)
1 device
Webex Meetings
v10043,7,2023,0709
1 device
Webex Meetings
v44.7.2.7
1 device
Webex Meetings
v40.2.10.14 (40.2.10-2020-03-18)
1 device
Webex Meetings
v10044,2,2023,1227
1 device
Webex Meetings
v10044,10,2024,0828
1 device
Webex Meetings
v10045,2,2024,1204
1 device
Webex Meetings
v10042,5,2022,0329
1 device
Webex Meetings
v10044,3,2024,0314
1 device
Affected Devices
201
105CONFTV
Windows
305CONFTV
Windows
A00016048's MacBook Pro-N2V9C9LV3T
Mac
A00017654-HHHJNMFKV4
Mac
ADV-1TT11HB2
Windows
AIS2103-05
Windows
AIS2103-06
Windows
AIS2103-08
Windows
ASPIRE-170751
Windows
ASPIRE-170798
Windows
CAI-JTAYL-HPZ2
Windows
CAPS-6QY49R3
Windows
CCE312B-HDFS3
Windows
CCE419-HDFS1
Windows
CCE445-MRUST
Windows
CSIversons-MacBook-Pro-3.local
Mac
CTE2209-01
Windows
Chen-Chens-MacBook-Pro-173.local
Mac
Clair-Canfields-iMac-M1-24.local
Mac
DAN-SPECTRE
Windows
DBLAKE
Windows
DEAN-JENNH
Windows
DESKTOP-1498ECT
Windows
DESKTOP-49I0MQO
Windows
DESKTOP-8TES4R8
Windows
DESKTOP-D7VPBP1
Windows
DESKTOP-QO5C653
Windows
DPADMS-9DMTDS3
Windows
DPADVS-A7421JV6
Windows
DPAERC-L4303MDG
Windows
DPAFAC-FF2K533
Windows
DPAGEC-MXL9194B
Windows
DPAPSB-A9061HLG
Windows
DPAPSB-JGSL3Q3
Windows
DPAPSB-L9202RW4
Windows
DPBIOL-181136
Windows
DPBIOL-5VMJG97
Windows
DPCBRC-0F00QWC2
Windows
DPCBRC-BSHZNF3
Windows
DPCDIS-1N6KHR3
Windows
DPCHEM-2DF6BT2
Windows
DPCOMP-05143MP
Windows
DPCONT-2JRK5X3
Windows
DPCONT-3FPP234
Windows
DPCONT-83KZ724
Windows
DPCONT-B4HQH34
Windows
DPCONT-F4F0CY3
Windows
DPCPD-MZ00A885
Windows
DPCPD-MZ01225Y
Windows
DPCWSW-85171Y34
Windows
DPDISR-12537XZ
Windows
DPDNNR-MP1NXJPV
Windows
DPDSAN-PF4SMLVX
Windows
DPEBIE-A8232PSJ
Windows
DPEBIE-FOSTER
Windows
DPEECE-REYHAN
Windows
DPEECE-WILBUR
Windows
DPEENGR-413QSUR
Windows
DPEMAE-3FQBV12
Windows
DPEXAN-DL4P6M3
Windows
DPEXHC-1K4B0F3
Windows
DPEXHC-9DKPX64
Windows
DPEXHC-DM8ZBW3
Windows
DPEXHC-YX0CG01K
Windows
DPEXYP-14R6034
Windows
DPEXYP-1FJP2R2
Windows
DPEXYP-9LRP2R2
Windows
DPHSOB-02740
Windows
DPHSOB-13514453
Windows
DPHSOB-313353
Windows
DPHSOB-66L6YW3
Windows
DPHSOB-9G2DM33
Windows
DPHSOB-F24263H7
Windows
DPHSOB-GYB87G3
Windows
DPIESV-L2363X83
Windows
DPINFT-09314050
Windows
DPINFT-2T42C54
Windows
DPITCL-MXL32037
Windows
DPITED-A7242KKG
Windows
DPLAEP-JAKEPOWE
Windows
DPLIBR-5KQ4284
Windows
DPMATH-182646
Windows
DPMATH-H3D95DU
Windows
DPNCHA-194740
Windows
DPNDFS-2231FTH
Windows
DPPDP-6183C7D
Windows
DPPERS-D2227CJB
Windows
DPPKTR-55ZT144
Windows
DPPROV-7LY0T74
Windows
DPREGS-JM4L2N3
Windows
DPSTFS-3NWN924
Windows
DPSTFS-5NWN924
Windows
DPSWRK-823513FB
Windows
DPUNAD-1194357
Windows
DPUNAD-6592457
Windows
DPUWRL-JOANNAHO
Windows
DPUWRL-PW0DH0AC
Windows
DPVPRS-7X1Q0T3
Windows
DPZECO-3T23G54
Windows
DUSTINS-M15R2
Windows
EB-Z2
Windows
ED337-BARBARA
Windows
EDUC-2353W2
Windows
EDUC-PRTEAM-2Q5
Windows
EOP-MBP-3.local
Mac
Erics-Mac-Studio-2.local
Mac
FACFM94B7K
Windows
FACGORDONCXPS
Windows
FACHP94B9P
Windows
FACHVACH6QNR33
Windows
FACLENOVOKEN
Windows
FACPDC696WST3
Windows
FACREIDO-5HSTC1
Windows
FL217-1-ADOTTER
Windows
GENO5520
Windows
Gregs-MacBook-Pro-2.local
Mac
HDFS-LISA-REEDE
Windows
HPER-CLF4VQ3
Windows
ITCL-GARYPC
Windows
JLSCDRC2008-01
Windows
JLSCDRC2310-01
Windows
JLSCRELI2204-01
Windows
JORDAN-YOGA-9I
Windows
KHS-J2KFVD3
Windows
KRANDOLPH
Windows
LAPTOP-OT0L24EQ
Windows
LENOVOYOGA
Windows
LLC22-17
Windows
LOGAN-BALLRM-E
Windows
MC-NASNTI-01
Windows
MICHELLEUSUHP
Windows
MUSE1809-01
Windows
MacBook-Pro
Mac
MacBook-Pro-384.local
Mac
NCH-194727
Windows
NEC-MXL1092KCX
Windows
PETERW-LGGRAM
Windows
POLICE-NUC
Windows
POTTERV
Windows
PSYC-8TL57D3
Windows
PSYC-GBYQDF3
Windows
PYSCH-MIKELEVIN
Windows
RM277-BNR
Windows
RM361-BNR
Windows
RVSCTE2110-01
Windows
RVSOFEQ2302
Windows
RVSSCI2210-01
Windows
RVSTEST17-11
Windows
RVSTEST17-17
Windows
SCCE407-MGERALD
Windows
SCHF-DAVIDFORBU
Windows
SOCA-GLUP-XPS13
Windows
SSWA-G7RZZ12
Windows
STONER-5820
Windows
SW-MWALTO-D5530
Windows
Scotts-MacBook-Pro-4.local
Mac
Sharas-MacBook-Pro-3.local
Mac
Sper-Trent-Landon-H4TJC098Q6W8-542.local
Mac
TAL-XPS13
Windows
TEAL-14801J
Windows
TEST
Windows
THACK_TOP2
Windows
Tims-MacBook-Pro.local
Mac
UPEL-170789
Windows
UPEL-P00121
Windows
UPEL-P00129
Windows
UPEL-P00173
Windows
UPEL-P00175
Windows
UPR-TED
Windows
UPR-TOM
Windows
USU-UB-SC-116AD
Windows
USUSLC-MGIVLER
Windows
USUSLCARCHULETA
Windows
USUSLCLPETERSON
Windows
UXD-Labs-MacBook-Pro-62.local
Mac
WIBCTE2308-01
Windows
YOUNG-THINKPAD-
Windows
a00014897-WP6XYPPF74
Mac
a00015955-J1645RY2HV
Mac
a00016657-C02YQ4FPLVDD
Mac
a00016716-C02FL0RBMD6P
Mac
a00297284-HG197KQV6M
Mac
a00940590-DMPKGT62NP
Mac
a00983376-G09J49PM70
Mac
a01183354-KYFHXKX3WR
Mac
a01216346-DH3CVX2GFD
Mac
a01491006-J7FTQ45V24
Mac
a02177460-FJWM65JTH9
Mac
a02190079-GQ9RXXGK7W
Mac
a02372201-MWKVYL6Q4D
Mac
a02375173-G7HDH66F2M
Mac
a02384028-GTVGW70CDH
Mac
a02405887-F03VD77V51
Mac
ah-mbp.lan
Mac
cehsadmin's MacBook Pro-C02GM1P8Q05P
Mac
dorismcgonagill-MFJJQH666D
Mac
hasslocaladmin's MacBook Air-TKXXVH9K57
Mac
ken-mpb16-LG9VYFY7QD
Mac
mdm-mbp16-5.local
Mac
murftastic.local
Mac
ryan-MacBook-Pro-2023
Mac