Skip to content
VulniPulse
Sign in
Advisory severityMedium5.0Cisco

Medium [CVE-2026-20314] Cisco Packaged Contact Center Enterprise and Cisco Unified Contact Center Enterprise Server-Side Request Forgery Vulnerability

This medium-severity Cisco advisory covers CVE-2026-20314 affecting Packaged Contact Center Enterprise, Unified Contact Center Enterprise.

Aggregated and source-linked by VulniPulse. Data sources, validation and limitations.

cisco-sa-ucce-pcce-ssrf-TghHxD Source published Source updated

VulniPulse record published Record updated

CVE-2026-20314
Affected products & platforms
CiscoUnified Communications
Open source advisory

Android app · Google Play

Monitor future Cisco CVEs from your phone.

Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.

Matching phone alertsOptional email delivery
Get CVE alertsSee app features

Summary

A vulnerability in Cisco Packaged Contact Center Enterprise (Packaged CCE) and Cisco Unified Contact Center Enterprise (Unified CCE) could allow an authenticated, remote attacker to conduct server-side request forgery (SSRF) attacks through an affected device. The flaw is caused by improper input validation for specific HTTP requests.

Affected versions
  • Scope: At the time of publication, this vulnerability affected Cisco Packaged CCE and Cisco Unified CCE, regardless of device configuration.
  • Earlier than 15.0 — Migrate to a fixed release
  • Release 15.0 (first fixed: 15.0(1)ES202607)

Official advisory · high-confidence parse· fetched 11 days ago·verify at source

Fixed versions
  • 15.0(1)ES202607

Official advisory · high-confidence parse· fetched 11 days ago·verify at source

Mitigation checklist

Recommended fix / mitigation
  • Upgrade to the first fixed release for your train per the Fixed Releases table in this advisory.
  • Earlier than 15.0: migrate to a fixed release.
  • Release 15.0: upgrade to 15.0(1)ES202607.
Workaround status
  • There are no workarounds that address this vulnerability.

Official advisory · high-confidence parse· fetched 11 days ago·verify at source

Discussion(0)

No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.

Sign in to join the discussion.