CVE-2026-20078
Gravedad CVSS v3.1:
MEDIA
Tipo:
CWE-23
Limitación incorrecta de nombre de ruta relativa a un directorio restringido (Relative Path Traversal)
Fecha de publicación:
15/04/2026
Última modificación:
15/04/2026
Descripción
*** Pendiente de traducción *** Multiple vulnerabilities in Cisco Unity Connection could allow an authenticated, remote attacker&nbsp;to download arbitrary files from an affected system. To exploit these vulnerabilities, the attacker must have valid administrative credentials.&nbsp;<br />
<br />
These vulnerabilities are due to improper sanitization of user input to the web-based management interface. An attacker could exploit these vulnerabilities by sending a crafted HTTPS request. A successful exploit could allow the attacker to download arbitrary files from an affected system.
Impacto
Puntuación base 3.x
6.50
Gravedad 3.x
MEDIA