CVE intelligence

CVE-2026-20327

Vulnerability intelligence

Published Aug 19, 2026Sources checked Oct 27, 2026

6.5MEDIUMCVSS out of 10

What this means

Review the available evidence

CVE-2026-20327 and is rated Medium severity with a CVSS score of 6.5. It is not in the current CISA KEV record we collected. That does not prove exploitation has not occurred.

What to do next

Remediation and response

Cisco Security Advisories guidance

Vendor revision: Oct 20, 2026

Cisco has released software updates that address this vulnerability.

Cisco Security Advisories guidance

Vendor revision: Aug 19, 2026

Vendor remediation details

On August 19, 2026, the Cisco Product Security Incident Response Team (PSIRT) published the following advisories: Cisco Security Advisory CVE ID Security Impact Rating CVSS Base Score Cisco Crosswork Security Hardening Release: August 2026 CVE-2026-20030CVE-2026-20357CVE-2026-20358CVE-2026-20359 Critical 10.0 Cisco Secure Workload Software Security Hardening Release: August 2026 CVE-2026-20231CVE-2026-20315CVE-2026-20317CVE-2026-20318CVE-2026-20319 Critical 10.0 Cisco BroadWorks Out-of-Band Blind XML External Entity Injection Vulnerability CVE-2026-20320 High 7.5 Cisco Unified Intelligence Center SQL Injection Vulnerability CVE-2026-20327 Medium 6.5 Cisco RoomOS Stack Overflow Vulnerability CVE-2026-20302 Medium 6.1 Cisco Industrial Ethernet 1000 Series Switches Stored Cross-Site Scripting

CISA KEVNot listedBased on the latest collected catalog

EPSS0.3%Estimated 30-day exploitation probability

Ransomware useNot markedCISA KEV ransomware field

Threat actors0Source-linked actor relationships

Overview

What is CVE-2026-20327?

A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an authenticated, local attacker to perform a blind SQL injection attack against an affected device.

This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted request to the web-based management interface.

A successful exploit could allow the attacker to read the contents of the internal database of an affected device. To exploit this vulnerability, the attacker must have valid user credentials on the affected device.

Source: NVD

Official advisory

Configuration and update guidance

Cisco Security Advisories · Updated Oct 20, 2026

Affected products and configuration

At the time of publication, this vulnerability affected Cisco Unified Intelligence Center, regardless of device configuration.

At the time of publication, this vulnerability also affected Cisco Unified Contact Center Express (Unified CCX) because it includes Cisco Unified Intelligence Center as part of its software bundle.

For information about which Cisco software releases were vulnerable at the time of publication, see the Fixed Software section of this advisory. See the Details section in the bug ID(s) at the top of this advisory for the most complete and current information.

Workarounds and temporary mitigations

There are no workarounds that address this vulnerability.

Fixed software

Cisco considers any workarounds and mitigations (if applicable) to be temporary solutions until an upgrade to a fixed software release is available. To remediate this vulnerability and avoid future exposure as described in this advisory, Cisco strongly recommends that customers upgrade to the fixed software indicated in this advisory.

Fixed Releases

At the time of publication, the release information in the following table was accurate. See the Details section in the bug ID(s) at the top of this advisory for the most complete and current information.

The left column lists Cisco software releases, and the right column indicates whether a release was affected by the vulnerability that is described in this advisory and which release included the fix for this vulnerability.

Cisco Unified Intelligence Center Software Release	First Fixed Release
Earlier than 12.6	Migrate to a fixed release.
12.6	12.6(2) ES08
15.0	15.0(1) SU2

Cisco Unified CCX Software Release	First Fixed Release
Earlier than 15.0	Migrate to a fixed release.
15.0	15.0(1) SU1

The Cisco Product Security Incident Response Team (PSIRT) validates only the affected and fixed release information that is documented in this advisory.

Exploitation status

The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory.

Read the collected advisory