Cisco patched a Unified CM flaw allowing unauthenticated network attackers to write files and escalate to root.

A stack-based buffer overflow vulnerability in HP VoIP phones allows remote attackers to execute arbitrary code with root privileges.

Cisco warns of public PoC targeting CVE-2026-20230, a high-severity SSRF vulnerability in Unified CM and Unified CM SME.