Hackers Exploiting Cisco Unified CM Vulnerability
2026-06-24T07:24:08Z•824972672960bf7513b6ef121c5e7370a42c22df00d63847d80f761b7298484c
AI modelAnthropicCVE-2026-20230CiscoDaybreakDifyDragosEmberAIFFmpegFortiBleedKNOXMythosOT securityOpenAIPixelSmashRCESamsungUnified CMdata exposureexploitkernel exploitlibavcodecmulti-tenantproof-of-conceptuse-after-free
What happened
This collection of SecurityWeek items highlights multiple high-impact vulnerabilities and threats. Cisco disclosed that a public proof-of-concept existed for CVE-2026-20230 as attackers began exploiting a Unified CM flaw; vendors have released patches. Other notable issues include data-exposure flaws in the multi-tenant Dify AI platform (risk of cross-tenant data/API access), a high-severity use-after-free in Samsung KNOX affecting many Galaxy devices (kernel attack risk), and an FFmpeg “PixelSmash” vulnerability allowing RCE via crafted media using libavcodec. Additional coverage: Dragos’ new
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityweek
- Record identifier
- 824972672960bf7513b6ef121c5e7370a42c22df00d63847d80f761b7298484c
- Enrichment time
- 2026-06-24T07:24:08Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.