Vulnslist

Cisco vulnerabilities by product, model, software, and advisory.

CVE-2026-20060

A vulnerability in the web-based management interface of Cisco Unity Connection could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability is due to improper input validation of HTTP request parameters. An attacker could exploit this vulnerability by persuading a user to click a crafted link. A successful exploit could allow the attacker to redirect a user to a malicious web page.

SeverityMEDIUM
CVSS4.7
CWECWE-601
KEV
Published
Modified

Related Products

Product Advisory Evidence
Cisco Unity Connection cisco-sa-unity-vulns-n2EJSbbw Cisco OpenVuln
Cisco Unity cisco-sa-unity-vulns-n2EJSbbw Cisco OpenVuln