Cisco Unified CM CVE-2026-20230 is in CISA KEV with active exploitation. Check WebDialer, patch 14SU6 or the approved 15 COP path, and verify voice services.