CVE-2026-20327

Name of the Vulnerable Software and Affected Versions Cisco Unified Intelligence Center (affected versions not specified)

Description Insufficient validation of user-supplied input in the web-based management interface allows an authenticated, local attacker to perform a blind SQL injection attack. By sending a crafted request to the interface, an attacker with valid user credentials can read the contents of the internal database. Blind SQL injection is a technique where an attacker asks the database true or false questions and determines the answer based on the application's response.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.