Cisco Unified Communications Products Security Hardening Release: October 2026
cisco-sa-voice-hardening-twgbH9e3
Summary
A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, remote attacker with low privileges to perform a denial of service (DoS) attack against an affected device. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted input to the web-based management interface of an affected device.
A successful exploit could allow the attacker to cause the web-based management interface to become unresponsive. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. Security Impact Rating: Medium CVE: CVE-2026-20308
Products covered
A separate affected-products list was not included in the collected bulletin.
Remediation
Cisco has released software updates that address this vulnerability.
CVEs in this advisory 1
Updates
- Published by Cisco
The publication date reported by the vendor.
- Added to SecurityAlert
We collected the advisory from the official source.
- Confirmed at the source
Our collector saw this advisory during a later source check.