Cisco Unity Connection Cross-Site Scripting, Open Redirect, and SQL Injection Vulnerabilities

mediumCVE-2026-20059 CVE-2026-20060 CVE-2026-20061

Multiple vulnerabilities in Cisco Unity Connection could allow a remote attacker to conduct a cross-site scripting (XSS) attack, an open redirect attack, and an SQL injection attack. For more information about these vulnerabilities, see the Details section of this advisory. Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-unity-vulns-n2EJSbbw Security Impact Rating: Medium CVE: CVE-2026-20059,CVE-2026-20060,CVE-2026-20061

CSIRTS triage

vendor: Cisco product: Unity Connection Cross-site scriptingOtherSQL injection

What: Multiple vulnerabilities could allow a remote attacker to conduct XSS, open redirect, and SQL injection attacks.
Who is affected: Users of the web-based management interface of affected systems.
Urgency: Remediation is necessary due to the potential for various attacks.
Action: Update to the latest software version.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch Unity Connection

Get an email when a new Unity Connection advisory drops — max one per day, one-click unsubscribe.

Details

Source: Cisco Security Advisories (INTL · vendor-psirt · site)
Severity: medium
Published: 2026-04-15
Exploitation: Not in CISA KEV at last sync

Original advisory: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-unity-vulns-n2EJSbbw?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Unity%20Connection%20Cross-Site%20Scripting,%20Open%20Redirect,%20and%20SQL%20Injection%20Vulnerabilities%26vs_k=1

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

Low exploitation riskCVE-2026-200590.19% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 9% of all scored CVEs.
Low exploitation riskCVE-2026-200600.20% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 10% of all scored CVEs.
Low exploitation riskCVE-2026-200610.23% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 14% of all scored CVEs.

Referenced CVEs

CVE	CSIRTS overview	External
CVE-2026-20059	coverage & exploitation status	NVD · CVE.org
CVE-2026-20060	coverage & exploitation status	NVD · CVE.org
CVE-2026-20061	coverage & exploitation status	NVD · CVE.org

Recent advisories for Cisco Unity Connection

A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.

highCisco Unity Connection Remote Code Execution and Server-Side Request Forgery Vulnerabilitiescisco-psirt · 2026-05-06
mediumCisco Unity Connection Arbitrary File Download Vulnerabilitiescisco-psirt · 2026-04-15