CVE-2019-15986

CVE-2019-15986 is a command injection vulnerability in the CLI of Cisco Unity Express, affecting all versions of the product. An authenticated, local attacker with administrator credentials can exploit improper input validation to execute arbitrary commands with root privileges. The vulnerability carries a CVSS score of 6.7 (MEDIUM), indicating high impact on confidentiality, integrity, and availability, but requires high privileges and local access. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.