CVE-2025-20276— Cisco Unified Contact Center Express Remote Code Execution Vulnerability
Quick assessment
Affected
Cisco Cisco Unified Contact Center Express
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Cisco Unified CCX是美国思科（Cisco）公司的一款联络中心软件。 Cisco Unified CCX存在代码问题漏洞，该漏洞源于Java对象反序列化不安全，可能导致执行任意代码。
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2025-20276
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Cisco Unified Contact Center Express Remote Code Execution Vulnerability
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability in the web-based management interface of Cisco Unified CCX could allow an authenticated, remote attacker to execute arbitrary code on an affected device. To exploit this vulnerability, the attacker must have valid administrative credentials.
This vulnerability is due to insecure deserialization of Java objects by the affected software. An attacker could exploit this vulnerability by sending a crafted Java object to an affected device. A successful exploit could allow the attacker to execute arbitrary code on the underlying operating system of an affected device as a low-privilege user. A successful exploit could also allow the attacker to undertake further actions to elevate their privileges to root.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
可信数据的反序列化
Source: CVE Program / CVE List V5
Vulnerability Title
Cisco Unified CCX 代码问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Cisco Unified CCX是美国思科（Cisco）公司的一款联络中心软件。 Cisco Unified CCX存在代码问题漏洞，该漏洞源于Java对象反序列化不安全，可能导致执行任意代码。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Cisco | Cisco Unified Contact Center Express | 10.6(1) | - |
|
II. Public POCs for CVE-2025-20276
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-20276
请登录查看更多情报信息。
Vendor Advisories for CVE-2025-20276 (1)
Same Patch Batch · Cisco · 2025-06-04 · 12 CVEs total
| CVE-2025-20286 | 9.9 CRITICAL | ISE on AWS Static Credential |
| CVE-2025-20261 | 8.8 HIGH | Cisco Integrated Management Controller Privilege Escalation Vulnerability |
| CVE-2025-20163 | 8.7 HIGH | Cisco Nexus Dashboard Fabric Controller SSH Host Key Vulnerability |
| CVE-2025-20273 | 6.1 MEDIUM | Cisco Unified Intelligent Contact Management Enterprise Cross-Site Scripting vulnerability |
| CVE-2025-20278 | 6.0 MEDIUM | Cisco Unified Communications Products Command Injection Vulnerability |
| CVE-2025-20259 | 5.3 MEDIUM | Cisco ThousandEyes Endpoint Agent for Windows Arbitrary File Write Vulnerability |
| CVE-2025-20275 | 5.3 MEDIUM | Cisco Unified Contact Center Express Editor Remote Code Execution Vulnerability |
| CVE-2025-20130 | 4.9 MEDIUM | Cisco Identity Services Engine Access Control Bypass Vulnerability |
| CVE-2025-20279 | 4.8 MEDIUM | Cisco Unifed Contact Center Express Stored Cross-Site Scripting Vulnerability |
| CVE-2025-20129 | 4.3 MEDIUM | Cisco Customer Collaboration Platform Information Disclosure Vulnerability |
| CVE-2025-20277 | 3.4 LOW | Cisco Unified Contact Center Express Path Traversal Vulnerability |
IV. Related Vulnerabilities
Same product: Cisco Unified Contact Center Express
-
CVE-2026-20117
Multiple Cisco Contact Center Products Cross-Site Scripting -
CVE-2026-20116
Multiple Cisco Contact Center Products Cross-Site Scripting -
CVE-2025-20375
Cisco Unified Contact Center Express Arbitrary File Upload V -
CVE-2025-20376
Cisco Unified Contact Center Express Remote Code Execution V -
CVE-2025-20374
Cisco Unified Contact Center Express Arbitrary File Download
Same vendor: Cisco
-
CVE-2026-76504
Cisco Catalyst SD-WAN Manager System Account Authorization B -
CVE-2026-76426
Cisco ISE REST API SQL Injection Vulnerability -
CVE-2026-20121
CIsco FTD Bypass Access List -
CVE-2026-76431
Cisco Identity Services Engine Arbitrary File Deletion Vulne -
CVE-2026-76427
Cisco ISE XML External Entity Injection Vulnerability
Same weakness: CWE-502
-
CVE-2026-102108
Kiteworks Email Protection Gateway deserialization of untrus -
CVE-2026-102135
Kiteworks Email Protection Gateway Deserialization of Untrus -
CVE-2026-102101
Kiteworks Core deserialization of untrusted data -
CVE-2026-102392
WordPress Extra Product Options For WooCommerce | Custom Pro -
CVE-2026-102377
WordPress Photo Gallery by 10Web plugin <= 1.8.46 - PHP Obje
V. Comments for CVE-2025-20276
No comments yet