CVE-2026-20188

Cisco Crosswork Network Controller and Cisco Network Services Orchestrator Advisory

Severity
None 0
CVSS 3.1
Remote · no auth what this means
Exploited
Not listed
EPSS
0.003
21.7th percentile
Discovered by
Vendor
Vendor-published field
Published
May 6, 2026
Assigned by cisco

Description

Following the initial publication of the Security Advisory about a denial of service (DoS) condition in Cisco Crosswork Network Controller and Cisco Network Services Orchestrator (NSO), additional information has been made available to the Cisco Product Security Incident Response Team (PSIRT). Upon further analysis, the Cisco PSIRT has reclassified this issue as a customer-configurable, resource management issue rather than a security vulnerability.

Weakness: CWE-400

Affected products

Vendor Product Category Matched by
Cisco Cisco Crosswork Network & Security Management cna-assigner
Vendor-reported products (1)
  • Cisco · Cisco Crosswork Network Change Automation — vendor states not affected

Vendor advisory

cisco-sa-nso-dos-7Egqyc

Cisco Crosswork Network Controller and Cisco Network Services Orchestrator Advisory

Cisco’s rating: Informational (advisory CVSS 0.0) · Published May 6, 2026 · updated May 14, 2026 (revision 2.0)

Bug ID: CSCwr08237

The vendor’s rating applies to the whole advisory and can differ from this CVE’s own CVSS severity. Where this comes from

Something wrong here?