An SSRF vulnerability in Cisco Unified CM is being actively exploited in practice and potentially enables root access, making rapid patching or disabling vulnerable services essential.