Find notable cyber news and cases, enriched with sources, timelines, and signals.
Home Watchlists Beta Browse News Feed Stats About Contact

Cisco security patch release for CVE-2025-20354

Security Patch Release
First reported
Last updated
Happening score
H score 34
1 unique sources, 1 articles

Summary

Hide ▲

Cisco released security updates for UCCX and related products, closing a critical root-command execution flaw and other vulnerabilities that could let attackers gain admin or root control on affected systems. The release covers CVE-2025-20354, a CCX Editor authentication-bypass issue, and additional Cisco ISE and contact-center flaws. Cisco told administrators to move to the listed fixed releases as soon as possible.

Related Happenings

Cisco security patch release for CVE-2026-20245

Security Patch Release
H score38 First: 25.06.2026 00:29 Last: 25.06.2026 00:29 Sources 1

About this happening: Cisco released **security updates** for **Cisco Catalyst SD-WAN** after **CVE-2026-20245** was linked to root-level command execution, and customers were told to move to fixed sof...

Open Happening

Cisco security patch release for CVE-2026-20262

Security Patch Release
H score47 First: 15.06.2026 20:12 Last: 15.06.2026 20:12 Sources 1

About this happening: **Cisco** released **security updates** for **CVE-2026-20262** in **Catalyst SD-WAN Manager**, covering multiple release trains after the zero-day was exploited to reach **root pr...

Open Happening

Cisco Unified Communications Manager security update for CVE-2026-20230

Security Patch Release
H score56 First: 04.06.2026 14:09 Last: 04.06.2026 14:09 Sources 1

About this happening: Cisco released **security updates** for **Cisco Unified Communications Manager (Unified CM)** to fix **CVE-2026-20230**, a **critical** flaw that could let a remote attacker reach...

Open Happening

Cisco Secure Workload REST API patch release (CVE-2026-20223)

Security Patch Release
H score55 First: 22.05.2026 08:36 Last: 22.05.2026 08:36 Sources 1

About this happening: Cisco patched **CVE-2026-20223**, a **CVSS 10.0** Secure Workload REST API flaw that could expose sensitive data and allow configuration changes across tenant boundaries. The upda...

Open Happening

Cisco ThousandEyes and Nexus security patches

Security Patch Release
H score31 First: 21.05.2026 15:04 Last: 21.05.2026 15:04 Sources 1

About this happening: Cisco released patches for **three medium-severity vulnerabilities** affecting **ThousandEyes Virtual Appliance**, **ThousandEyes Enterprise Agent**, and **Nexus 3000/9000 switche...

Open Happening

Timeline

  1. 06.11.2025 15:31 2 articles · 8mo ago

    Cisco patches critical UCCX CVE-2025-20354

    Mitigation Patch Update

    Cisco released security updates for Cisco Unified Contact Center Express (UCCX) to fix CVE-2025-20354, a critical Java Remote Method Invocation (RMI) flaw that could let unauthenticated attackers upload a crafted file, execute arbitrary commands, and elevate privileges to root on affected systems; Cisco advised administrators to upgrade to the fixed releases and said PSIRT had found no evidence of public exploit code or in-the-wild exploitation.

    Show sources
    Open in new tab
  2. 06.11.2025 15:31 1 articles · 8mo ago

    Cisco patches CCX Editor authentication bypass

    Mitigation Patch Update

    Cisco patched a critical security flaw in the Contact Center Express (CCX) Editor application of Cisco UCCX that could let unauthenticated attackers bypass authentication, redirect the auth flow to a malicious server, and create and execute arbitrary scripts with admin permissions; Cisco also directed administrators to move to the fixed UCCX releases.

    Show sources
    Open in new tab