CVE-2026-20359criticalCWE-522

CVE-2026-20359: falha crítica em Cisco Crosswork Planning

Cisco Crosswork Security Hardening Release: August 2026

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Cisco Crosswork Planning

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Ela tem alerta oficial do governo brasileiro.

ssvc Trackcvss 9.9epss 0.4%
Alerta oficial no Brasil

O governo federal publicou alerta, recomendação ou boletim que cita esta vulnerabilidade.

Fonte: CTIR Gov (GSI) e CISC Gov.br, sob licença CC BY-ND 3.0.
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Crosswork engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities trackled by CVE-2026-20359 are related to insufficiently protected credentials issues that are grouped under the Common Weakness Enumeration (CWE) CWE-522.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Produtos afetados
Cisco · Cisco Crosswork Planning
CVEs relacionadas — Cisco Crosswork Planning

No mesmo produto, das mais perigosas para as menos.

CVE-2026-20357CRITICALCisco Crosswork Security Hardening Release: August 2026EPSS 0.6%CVE-2026-20030CRITICALCisco Crosswork Security Hardening Release: August 2026EPSS 0.6%CVE-2026-20358CRITICALCisco Crosswork Security Hardening Release: August 2026EPSS 0.5%