VYPR
← All advisories
Medium severity4.7NVD Advisory· Published Apr 15, 2026· Updated Apr 28, 2026

CVE-2026-20060

CVE-2026-20060

Description

A vulnerability in the web-based management interface of Cisco Unity Connection could allow an unauthenticated, remote attacker to redirect a user to a malicious web page.

This vulnerability is due to improper input validation of HTTP request parameters. An attacker could exploit this vulnerability by persuading a user to click a crafted link. A successful exploit could allow the attacker to redirect a user to a malicious web page.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

12
  • Cisco Systems, Inc./Unity Connection12 versions
    cpe:2.3:a:cisco:unity_connection:*:*:*:*:*:*:*:*+ 11 more
    • cpe:2.3:a:cisco:unity_connection:*:*:*:*:*:*:*:*range: <=12.5
    • cpe:2.3:a:cisco:unity_connection:14.0:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unity_connection:14su1:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unity_connection:14su2:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unity_connection:14su3:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unity_connection:14su3a:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unity_connection:14su4:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unity_connection:15.0:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unity_connection:15su1:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unity_connection:15su2:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unity_connection:15su3:*:*:*:*:*:*:*
    • (no CPE)

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.