CVE-2026-20357criticalCWE-306

CVE-2026-20357: falha crítica em Cisco Crosswork Planning

Cisco Crosswork Security Hardening Release: August 2026

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Cisco Crosswork Planning

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Ela tem alerta oficial do governo brasileiro.

ssvc Trackcvss 10epss 0.6%
Alerta oficial no Brasil

O governo federal publicou alerta, recomendação ou boletim que cita esta vulnerabilidade.

Fonte: CTIR Gov (GSI) e CISC Gov.br, sob licença CC BY-ND 3.0.
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Crosswork engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20357 are related to missing authentication for critical function issues that are grouped under the Common Weakness Enumeration (CWE) CWE-306.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Produtos afetados
Cisco · Cisco Crosswork Planning
CVEs relacionadas — Cisco Crosswork Planning

No mesmo produto, das mais perigosas para as menos.

CVE-2026-20030CRITICALCisco Crosswork Security Hardening Release: August 2026EPSS 0.6%CVE-2026-20358CRITICALCisco Crosswork Security Hardening Release: August 2026EPSS 0.5%CVE-2026-20359CRITICALCisco Crosswork Security Hardening Release: August 2026EPSS 0.4%