Unity Linux 20.1050e Security Update: kernel (UTSA-2026-004918)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004918 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: ohci-nxp: Fix refcount leak in ohcihcdnxpprobe ofparsephandle returns a node pointer with...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-004901)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004901 advisory. In the Linux kernel, the following vulnerability has been resolved: sctp: handle the error returned from sctpauthasocinitactivekey When it returns an error from...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-004829)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004829 advisory. In the Linux kernel, the following vulnerability has been resolved: drivers: serial: jsm: fix some leaks in probe This error path needs to unwind instead of just...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-004890)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004890 advisory. In the Linux kernel, the following vulnerability has been resolved: video: fbdev: s3fb: Check the size of screen before memsetio In the function s3fbsetpar, the valu...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-004870)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004870 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: cavium - prevent integer overflow loading firmware The codelength value comes from the...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-004841)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004841 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: fix use-after-free bug in brcmfnetdevstartxmit ret = brcmfprototxqueuedatadrvr,...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-004896)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004896 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: host: Fix refcount leak in ehcihcdppcofprobe offindcompatiblenode returns a node pointer wit...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-004887)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004887 advisory. In the Linux kernel, the following vulnerability has been resolved: ARM: bcm: Fix refcount leak in bcmkonasmcinit offindmatchingnode returns a node pointer with...

Cisco Fixes Actively Exploited Zero-Day CVE-2026-20045 in Unified CM and Webex

Cisco has released fresh patches to address what it described as a "critical" security vulnerability impacting multiple Unified Communications CM products and Webex Calling Dedicated Instance that it has been actively exploited as a zero-day in the wild. The vulnerability, CVE-2026-20045 CVSS...

Cisco Unity Connection Remote Code Execution (cisco-sa-voice-rce-mORhqY4b)

According to its self-reported version, Cisco Unity Connection is affected by a remote code execution vulnerability: - A vulnerability in Cisco Unified Communications Manager Unified CM, Cisco Unified Communications Manager Session Management Edition Unified CM SME, Cisco Unified Communications...

EUVD-2026-3600

A vulnerability in Cisco Unified Communications Manager Unified CM, Cisco Unified Communications Manager Session Management Edition Unified CM SME, Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P, Cisco Unity Connection, and Cisco Webex Calling Dedicated Instance could...

CVE-2026-20045

A vulnerability in Cisco Unified Communications Manager Unified CM, Cisco Unified Communications Manager Session Management Edition Unified CM SME, Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P, Cisco Unity Connection, and Cisco Webex Calling Dedicated Instance could...

Unity Linux 20.1070e Security Update: subversion (UTSA-2026-004812)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004812 advisory. Insufficient validation of filenames against control characters in Apache Subversion repositories served via moddavsvn allows authenticated users with commit access ...

Cisco’s various products have security vulnerabilities

Cisco Unity Connection, among others, are products of the American company Cisco. Cisco Unity Connection is a voice messaging platform. Cisco Unified Communications Manager is a call processing component within unified communication systems. Cisco Unified Communications Manager IM & Presence is a...

Cisco Unified Communications Products Code Injection Vulnerability

Cisco Unified Communications Manager Unified CM, Cisco Unified Communications Manager Session Management Edition Unified CM SME, Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P, Cisco Unity Connection, and Cisco Webex Calling Dedicated Instance contain a code injection...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: mingw-expat (UTSA-2026-004806)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004806 advisory. An issue was discovered in libexpat before 2.6.3. xmlparse.c does not reject a negative length for XMLParseBuffer. Tenable has extracted the preceding description...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: mingw-expat (UTSA-2026-004808)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004808 advisory. An issue was discovered in libexpat before 2.6.3. nextScaffoldPart in xmlparse.c can have an integer overflow for mgroupSize on 32-bit platforms where UINTMAX equals...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: mingw-expat (UTSA-2026-004807)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004807 advisory. An issue was discovered in libexpat before 2.6.3. dtdCopy in xmlparse.c can have an integer overflow for nDefaultAtts on 32-bit platforms where UINTMAX equals SIZEMA...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004390)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004390 advisory. In f2fsxattrgenericlist of xattr.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000561)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000561 advisory. The logprefix function in kernel/printk.c in the Linux kernel 3.x before 3.4.33 does not properly remove a prefix string from a syslog header, which allows local use...