VDB
CVE-2026-20230
CVE-2026-20230
PUBLISHED
KEV
CVSS 8.600000381469727 HIGH
This vulnerability is due to improper input validation for specific HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device.
EPSS 88.20% · 99.8th percentile
Risk Scores
CVSS 3.1
8.600000381469727
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
EPSS Score
88.20%
99.8th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Cisco Unified Communications Manager (Unified CM) | |
| Ubiquiti | Cisco Unified Communications Manager Session Management Edition (Unified CM SME) |
Timeline
- CVE Published
- Jun 5, 2026 EPSS Score
- Jun 10, 2026 Coalition ESS Score
- Jun 25, 2026 CISA KEV Added
- Jun 25, 2026 PoC Published
- Aug 7, 2026 EPSS Score
- Aug 24, 2026 EPSS Score