Critical unauthenticated SSRF flaw in Cisco Finesse leaves contact center interfaces exposed with no workaround. Patches delayed until early 2027. https://deafnews.it/en/article/cisco-finesse-left-defenseless-critical-ssrf-exposes-contact-center-interfaces-until-2027
DeafNewsCisco Finesse Left Defenseless: Critical SSRF Exposes Contact Center Interfaces Until 2027 | DeafNewsCVE-2026-20362 exposes Cisco Finesse's web interface to an unauthenticated SSRF attack via the embedded Apache Shindig proxy. Cisco confirms no workarounds exist; patches are not scheduled until January–February 2027.