CVE-2026-20281Disclosure

LOWCVSS 7.5 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability in Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875 that are running Cisco Session Initiation Protocol (SIP) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper memory management when an affected device processes HTTP packets. An attacker could exploit this vulnerability by sending a continuous stream of crafted HTTP packets to the device. A successful exploit could allow the attacker to cause the affected device to continuously consume memory, resulting in a DoS condition. A manual reboot of the device is required to recover from this condition. Note: For this vulnerability to be exploitable, the phone must be registered to Cisco Unified Communications Manager (Unified CM) and have Web Access enabled. Web Access is disabled by default.

Back to dashboard

0.5/ 10 priority

Sources & remediation

Other references

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-phone-dos-txMYNRzv

Weakness type (CWE)

CWE-401

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

Patch or workaround signal is available
3 mentions across 3 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 3 signals
Disclosure: 2 classified signals
Peaked 2d ago at 1 mentions (2026-09-02); latest day: 1
3 total mentions across 3 days

Deep dive

Activity timeline3 mentions / 3d

Signal classification2 categories

Disclosure

266.7%

Patch

133.3%

Referenced assets3 URLs

By indicator

Classification over time

Date	Total	Labels

2026-09-02	1	Disclosure1
2026-09-03	1	Disclosure1
2026-09-05	1	Patch1

Full discourse3 posts

Vistem Solutions@VistemSolutions44d
Patch
CVE-2026-20281 - High Vulnerability CVE-2026-20281 is a High severity vulnerability (CVSS 7.5) affecting Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875. Organizations using affected Cisco phones should review exposure, apply vendor updates, and monitor for unusual device behavior. ✅ Identify affected devices ✅ Apply Cisco guidance promptly ✅ Limit unnecessary network exposure ✅ Monitor logs and device availability Need help prioritizing remediation? 📩 sales@vistem.com #Cybersecurity #Cisco #CVE #VulnerabilityManagement #PatchManagement #BusinessSecurity #CyberResilience #VistemSolutions https://www.thehackerwire.com/vulnerability/CVE-2026-20281/?utm_source=in_page&utm_medium=Vistem+Solutions%2C+Inc.&utm_campaign=publer
Post summary
The tweet announces the high‑severity CVE‑2026‑20281 affecting certain Cisco phones, lists the CVSS score and affected devices, and urges applying vendor updates and monitoring for signs of exploitation.
0000058
89 followersView on X
SystemTek - Technology news website@SystemTek_UK45d
Disclosure
Cisco IP Phones Hit by High-Severity Denial-of-Service Vulnerability (CVE-2026-20281) https://www.systemtek.co.uk/2026/09/cisco-ip-phones-hit-by-high-severity-denial-of-service-vulnerability-cve-2026-20281/ via @SystemTek_UK
Post summary
The tweet announces a new high‑severity Denial-of-Service vulnerability (CVE‑2026‑20281) affecting Cisco IP phones, with no mention of PoC, exploits, or patches.
0000064
1.8K followersView on X
Kaitan ID Security@KaitanSecurity46d
Disclosure
⚠️ HIGH — CVE-2026-20281 Cisco Desk Phone 9800 Series, IP Phone 7800 and 8800 Series, and Video Phone 8875 with SIP Software Denial of Service V… CVSS 7.5 Full analysis → https://sec.kaitan.id/cves/CVE-2026-20281 #Cisco #CyberSecurity #InfoSec
Post summary
The post announces a new high‑severity DoS vulnerability (CVE-2026-20281) affecting Cisco’s Desk Phone, IP Phone, and Video Phone models, with no exploit details or patch information provided.
0000083
83 followersView on X

Explore more

Back to dashboard