CVE-2026-20030criticalCWE-89

CVE-2026-20030: fallo crítico en Cisco Crosswork Planning

Cisco Crosswork Security Hardening Release: August 2026

Publicada el

Seguir esta CVE+ Monitorear Cisco Crosswork Planning

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

28Vexday Risk Score

Sin señal de explotación. Ella tiene alerta oficial del gobierno de Brasil.

ssvc Trackcvss 10epss 0.6%
Alerta oficial en Brasil

El gobierno federal de Brasil publicó una alerta, recomendación o boletín que cita esta vulnerabilidad.

  • CTIR Gov · ALERTA 75/2026 · 26 ago 2026Vulnerabilidade crítica que afeta os produtos da Cisco e da Citrixleer en gov.br ↗
  • CISC Gov.br · 25 ago 2026Boletim do CISC de Vulnerabilidadesleer en gov.br ↗
Fuente: CTIR Gov (GSI) y CISC Gov.br, bajo licencia CC BY-ND 3.0.
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Crosswork engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20030 are related to improper neutralization of special elements used in a SQL command issues that are grouped under the Common Weakness Enumeration (CWE) CWE-89.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Productos afectados
Cisco · Cisco Crosswork Planning
CVEs relacionadas — Cisco Crosswork Planning

En el mismo producto, de las más peligrosas a las menos.

CVE-2026-20357CRITICALCisco Crosswork Security Hardening Release: August 2026EPSS 0.6%CVE-2026-20358CRITICALCisco Crosswork Security Hardening Release: August 2026EPSS 0.5%CVE-2026-20359CRITICALCisco Crosswork Security Hardening Release: August 2026EPSS 0.4%