CVE-2026-20030criticalCWE-89

CVE-2026-20030: critical vulnerability in Cisco Crosswork Planning

Cisco Crosswork Security Hardening Release: August 2026

Published

Follow this CVE+ Monitor Cisco Crosswork Planning

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. It has an official Brazilian government alert.

ssvc Trackcvss 10epss 0.6%
Official alert in Brazil

Brazil's federal government published an alert, recommendation or bulletin that cites this vulnerability.

  • CTIR Gov · ALERTA 75/2026 · 26 Aug 2026Vulnerabilidade crítica que afeta os produtos da Cisco e da Citrixread on gov.br ↗
  • CISC Gov.br · 25 Aug 2026Boletim do CISC de Vulnerabilidadesread on gov.br ↗
Source: CTIR Gov (GSI) and CISC Gov.br, under the CC BY-ND 3.0 license.
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Crosswork engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20030 are related to improper neutralization of special elements used in a SQL command issues that are grouped under the Common Weakness Enumeration (CWE) CWE-89.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Affected products
Cisco · Cisco Crosswork Planning
Related CVEs — Cisco Crosswork Planning

In the same product, most dangerous first.

CVE-2026-20357CRITICALCisco Crosswork Security Hardening Release: August 2026EPSS 0.6%CVE-2026-20358CRITICALCisco Crosswork Security Hardening Release: August 2026EPSS 0.5%CVE-2026-20359CRITICALCisco Crosswork Security Hardening Release: August 2026EPSS 0.4%