Vulnerabilities & Exploits · Web App Attack

Cisco Broadens Patch Scope Across Voice, Switches, IoT

Cisco’s latest advisory widens the blast radius beyond a single product line. The new issues turn Unity Connection into a root-level execution and SSRF pivot point, and they let malformed SNMP traffic reboot SG350 and SG350X switches, so the real risk is management-plane compromise and service disruption, not just another high-severity bug.

Cisco says CVE-2026-20034 and CVE-2026-20035 affect Unity Connection and can let remote authenticated attackers execute code as root or send requests from the device. CVE-2026-20185 affects SG350 and SG350X switches across SNMP 1, 2c, and 3, and Cisco also added a separate DoS flaw in IoT Field Network Director, broadening the patch set across voice, switching, and IoT management.

For operators, the key point is that these are different failure modes across different management planes. One set turns a communications platform into an internal request source and code-execution target, the other can drop network connectivity by forcing a switch reload.

3 sources · May 7

Timeline

• May 7 Reported by SecurityWeek
• May 6 Reported by Cisco PSIRT

Sources

• May 7 SecurityWeek

  Cisco Patches High-Severity Vulnerabilities in Enterprise Products

  Successful exploitation of the flaws could lead to code execution, server-side request forgery attacks, and denial-of-service conditions.

  original

• May 6 Cisco PSIRT

  Cisco Security Advisory: Cisco SG350 and SG350X Series Managed Switches SNMP Denial of Service Vulnerability

  A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco 350 Series Managed Switches (SG350) and Cisco 350X Series Stackable Managed Switches (SG350X) firmware could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.

  original

• May 6 Cisco PSIRT

  Cisco Security Advisory: Cisco Unity Connection Remote Code Execution and Server-Side Request Forgery Vulnerabilities

  Multiple vulnerabilities in Cisco Unity Connection could allow a remote attacker to execute arbitrary code on or conduct server-side request forgery (SSRF) attacks through an affected device.

  original

Vendor digest: Cisco

Part of the PlainSec briefing for 2026-05-06

Every edition of this story: Cisco Broadens Patch Scope Across Voice, Switches, IoT

More from today

• DAEMON Tools Build Pipeline Became the Attack Vector
• Weaver E-cology flaw turned servers into command shells
• Apache Patch Hides Module-Specific Exposure Across Hosts