CVE-2026-20109— Cisco Packaged Contact Center Enterprise and Cisco Unified Contact Center Enterprise Cross-Site Scripting Vulnerability
Quick assessment
Affected
Cisco Cisco Packaged Contact Center Enterprise
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Cisco Unified Contact Center Enterprise和Cisco Packaged Contact Center Enterprise都是美国思科（Cisco）公司的产品。Cisco Unified Contact Center Enterprise是一个统一联络中心。Cisco Packaged Contact Center Enterprise是一个客户接触中心系统。 Cisco Packaged Contact Center Enterprise和Cisco Unified
Possible ATT&CK Techniques 2 AI
T1059 · Command and Scripting Interpreter T1189 · Drive-by Compromise
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-20109
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Cisco Packaged Contact Center Enterprise and Cisco Unified Contact Center Enterprise Cross-Site Scripting Vulnerability
Source: CVE Program / CVE List V5
Vulnerability Description
Multiple vulnerabilities in the web-based management interface of Cisco Packaged Contact Center Enterprise (Packaged CCE) and Cisco Unified Contact Center Enterprise (Unified CCE) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device.
These vulnerabilities exist because the web-based management interface does not properly validate user-supplied input. An attacker could exploit these vulnerabilities by injecting malicious code into specific pages of the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. To exploit these vulnerabilities, the attacker must have valid administrative credentials.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Source: CVE Program / CVE List V5
Vulnerability Title
Cisco Packaged Contact Center Enterprise和Cisco Unified Contact Center Enterprise 跨站脚本漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Cisco Unified Contact Center Enterprise和Cisco Packaged Contact Center Enterprise都是美国思科（Cisco）公司的产品。Cisco Unified Contact Center Enterprise是一个统一联络中心。Cisco Packaged Contact Center Enterprise是一个客户接触中心系统。 Cisco Packaged Contact Center Enterprise和Cisco Unified
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Cisco | Cisco Packaged Contact Center Enterprise | 12.5(1) | - |
|
| Cisco | Cisco Unified Contact Center Enterprise | 12.6(1)ES3 | - |
|
II. Public POCs for CVE-2026-20109
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-20109
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-20109 (1)
Same Patch Batch · Cisco · 2026-01-21 · 5 CVEs total
| CVE-2026-20045 | 8.2 HIGH | Cisco Unified Communications Products Remote Code Execution Vulnerability |
| CVE-2026-20092 | 6.0 MEDIUM | Cisco Intersight Virtual Appliance Privilege Escalation Vulnerability |
| CVE-2026-20080 | 5.3 MEDIUM | Cisco IEC6400 Edge Compute Appliance SSH Denial of Service Vulnerability |
| CVE-2026-20055 | 4.8 MEDIUM | Cisco Packaged Contact Center Enterprise & Cisco Unified Contact Center Enterprise Cross-S |
IV. Related Vulnerabilities
Same product: Cisco Packaged Contact Center Enterprise
-
CVE-2026-20314
Cisco Packaged Contact Center Enterprise & Cisco Unified Con -
CVE-2026-20055
Cisco Packaged Contact Center Enterprise & Cisco Unified Con -
CVE-2025-20377
Cisco Unified Intelligence Center API Information Disclosure -
CVE-2018-0444
Cisco Packaged Contact Center Enterprise Cross-Site Scriptin -
CVE-2018-0445
Cisco Packaged Contact Center Enterprise Cross-Site Request
Same vendor: Cisco
-
CVE-2026-76426
Cisco ISE REST API SQL Injection Vulnerability -
CVE-2026-20121
CIsco FTD Bypass Access List -
CVE-2026-76431
Cisco Identity Services Engine Arbitrary File Deletion Vulne -
CVE-2026-76427
Cisco ISE XML External Entity Injection Vulnerability -
CVE-2026-76447
Cisco Identity Services Engine Certificate Reload Vulnerabil
Same weakness: CWE-79
-
CVE-2026-77912
Stored cross-site scripting vulnerability in GitHub Enterpri -
CVE-2026-88020
Improper Neutralization of Input During Web Page Generation -
CVE-2026-95812
ClipBucket v5 before 5.5.3-#182 Reflected XSS via Query Para -
CVE-2026-76909
Unleash: CR-approval email renders user-controlled raw HTML -
CVE-2026-83801
Nautobot: Stored cross-site scripting (XSS) in object create
V. Comments for CVE-2026-20109
No comments yet