Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability in the web-based management interface of Cisco Unity Connection could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability is due to improper input validation of HTTP request parameters. An attacker could exploit this vulnerability by persuading a user to click a crafted link. A successful exploit could allow the attacker to redirect a user to a malicious web page.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
10 versions affected across 1 product
CVE-2026-20060 A vulnerability in the web-based management interface of Cisco Unity Connection could allow an unauthenticated, remote attacker to redirect a user to a malicious web … https://www.cve.org/CVERecord?id=CVE-2026-20060
Post summary
The text announces a newly identified CVE that allows unauthenticated remote attackers to redirect users via the Cisco Unity Connection web interface.
11 of 11 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | cisco | unity_connection | - | - | - |
| App | cisco | unity_connection | 14.0 | - | - |
| App | cisco | unity_connection | 14su1 | - | - |
| App | cisco | unity_connection | 14su2 | - | - |
| App | cisco | unity_connection | 14su3 | - | - |
| App | cisco | unity_connection | 14su3a | - | - |
| App | cisco | unity_connection | 14su4 | - | - |
| App | cisco | unity_connection | 15.0 | - | - |
| App | cisco | unity_connection | 15su1 | - | - |
| App | cisco | unity_connection | 15su2 | - | - |
| App | cisco | unity_connection | 15su3 | - | - |