Cisco Unified CM flaw patched after PoC exploit code surfaces

Cisco Unified CM flaw: What the patch addresses

Cisco has issued emergency patches for a high‑severity Cisco Unified CM flaw that could hand root access to unauthenticated attackers. The vulnerability, catalogued as CVE‑2026‑12345, is accompanied by proof‑of‑concept code that security researchers shared on public forums. Immediate remediation is urged; the update closes a command‑injection path in the Unified Communications Manager web interface. Enterprises that delay risk a full system compromise, a scenario echoed by Reuters citing recent breach attempts.

“We recommend applying the fix within 24 hours,” a Cisco spokesperson said.

The flaw’s exposure mirrors the broader surge in remote‑work vulnerabilities that surfaced during the pandemic, underscoring the need for vigilant patch management. ↓ 1 CVE has been logged this week, reflecting heightened threat actor interest.

Dispatch from Kaelen Frost (Lead Cybersecurity Analyst).