VYPR
Get started
← All advisories
Medium severity4.7NVD Advisory· Published Apr 15, 2026· Updated Apr 28, 2026

CVE-2026-20060

CVE-2026-20060

Description

A vulnerability in the web-based management interface of Cisco Unity Connection could allow an unauthenticated, remote attacker to redirect a user to a malicious web page.

This vulnerability is due to improper input validation of HTTP request parameters. An attacker could exploit this vulnerability by persuading a user to click a crafted link. A successful exploit could allow the attacker to redirect a user to a malicious web page.

Affected products

11
  • Cisco Systems, Inc./Unity Connection11 versions
    cpe:2.3:a:cisco:unity_connection:*:*:*:*:*:*:*:*+ 10 more
    • cpe:2.3:a:cisco:unity_connection:*:*:*:*:*:*:*:*range: <=12.5
    • cpe:2.3:a:cisco:unity_connection:14.0:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unity_connection:14su1:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unity_connection:14su2:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unity_connection:14su3:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unity_connection:14su3a:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unity_connection:14su4:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unity_connection:15.0:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unity_connection:15su1:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unity_connection:15su2:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unity_connection:15su3:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.