CVE-2026-20357criticalCWE-306

CVE-2026-20357: fallo crítico en Cisco Crosswork Planning

Cisco Crosswork Security Hardening Release: August 2026

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear Cisco Crosswork Planning

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

28Vexday Risk Score

Sin señal de explotación. Ella tiene alerta oficial del gobierno de Brasil.

ssvc Trackcvss 10epss 0.6%
Alerta oficial en Brasil

El gobierno federal de Brasil publicó una alerta, recomendación o boletín que cita esta vulnerabilidad.

Fuente: CTIR Gov (GSI) y CISC Gov.br, bajo licencia CC BY-ND 3.0.
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Crosswork engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20357 are related to missing authentication for critical function issues that are grouped under the Common Weakness Enumeration (CWE) CWE-306.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Productos afectados
Cisco · Cisco Crosswork Planning
CVEs relacionadas — Cisco Crosswork Planning

En el mismo producto, de las más peligrosas a las menos.

CVE-2026-20030CRITICALCisco Crosswork Security Hardening Release: August 2026EPSS 0.6%CVE-2026-20358CRITICALCisco Crosswork Security Hardening Release: August 2026EPSS 0.5%CVE-2026-20359CRITICALCisco Crosswork Security Hardening Release: August 2026EPSS 0.4%