TLDR Tech / InfoSec
In Less Than 24 Hours, Attackers Weaponize Cisco CUCM Flaw
Attackers are exploiting CVE-2026-20230 in Cisco Unified Communications Manager to gain root access through an unauthenticated SSRF path in the WebDialer service. The exploit chain uses crafted HTTP requests, a rogue Apache Axis service, and staged JSP web shells to reach command execution and privilege escalation. Defused saw weaponization within 24 hours of public PoC release, and Horizon3.ai published a test while urging rapid patching or WebDialer shutdown on unpatched systems.
Read the full story