Cisco Unified CM flaw CVE-2026-20230 now exploited in attacks
2026-06-24T01:23:31Z•0bcf8643211d23187b52e5a30520045ed00c26865764c02107c05ebe85f6e399
AutoGen StudioAutoJackCVE-2026-20230Cisco Unified Communications ManagerDoSFFmpegFortiBleedFortiGateKlueLastPassMEV botPixelSmashRCESSRFTata ElectronicsVBScriptWhatsApp phishingXsolisactive exploitationcrypto theftdata breachincident responseinfo-stealermacOS ClickFixsupply-chain attack
What happened
BleepingComputer aggregation: a high-severity SSRF in Cisco Unified Communications Manager (CVE-2026-20230) is being actively exploited. Multiple other incidents reported include large data breaches (Tata Electronics, Xsolis), a LastPass data exposure via the Klue supply-chain attack, and credential-theft campaigns (FortiBleed targeting FortiGate). Technical flaws include an FFmpeg 'PixelSmash' vulnerability with potential RCE/DoS impact, and an AutoGen Studio 'AutoJack' chain enabling remote command execution; macOS and WhatsApp phishing campaigns are delivering info-stealers and VBScript dro
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- bleepingcomputer
- Record identifier
- 0bcf8643211d23187b52e5a30520045ed00c26865764c02107c05ebe85f6e399
- Enrichment time
- 2026-06-24T01:23:31Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.