Cisco patches critical flaw in Unified CM after public exploit

Published on June 05, 2026 | Translated from Spanish

Cisco has released patches for a critical vulnerability in its Unified Communications Manager (CM) system, a platform used to manage enterprise calls. The flaw, classified as severe, allows a remote attacker to execute unauthorized code without authentication. The urgency of the fix increased after researchers published a functional exploit, exposing thousands of companies to potential intrusions into their communication networks.

Cisco Unified Communications Manager server rack in a corporate data center, glowing red alert indicator on a network switch, a hooded figure remotely injecting malicious code through a laptop screen showing a terminal with exploit execution, green data streams flowing into the PBX system, lock icons breaking apart over the call management interface, dramatic red and blue emergency lighting, photorealistic technical visualization, cables and blinking LEDs emphasizing active network intrusion, cinematic security breach scene, ultra-detailed hardware components

Technical details of the patch and vulnerability 🔧

The vulnerability, identified as CVE-2025-20124, resides in the web administration interface of Unified CM. It originates from incorrect input data validation, allowing arbitrary command injection. Cisco recommends updating to version 15.0.1.23900-1 or later. Additionally, it suggests restricting access to administration interfaces through access control lists (ACLs) and network segmentation. The public exploit, available on GitHub repositories, simplifies the attack, making the update urgent.

The exploit that arrived before Monday's coffee ☕

It seems researchers are more enthusiastic about sharing dangerous toys than giving advance notice. Cisco, as always, had to rush to apply patches while system administrators sweated thinking about their call servers. The curious thing is that the exploit was published just before a weekend, as if they wanted IT teams to have something interesting to do on Monday morning. Good thing the coffee was hot.