CVE-2026-20357

Cisco Crosswork Security Hardening Release: August 2026

Severity
Critical 10
CVSS 3.1
Remote · no auth what this means
Exploited
Not listed
EPSS
0.006
47.6th percentile
Discovered by
Vendor
Vendor-published field
Published
Aug 19, 2026
Assigned by cisco

Description

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Crosswork engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20357 are related to missing authentication for critical function issues that are grouped under the Common Weakness Enumeration (CWE) CWE-306.

Weakness: CWE-306

Affected products

Vendor Product Category Matched by
Cisco Cisco Crosswork Network & Security Management cna-assigner
Vendor-reported products (1)
  • Cisco · Cisco Crosswork Planning

Vendor advisory

cisco-sa-hardening-crosswork-UzDTU9Vh

Cisco Crosswork Security Hardening Release: August 2026

Cisco’s rating: Critical (advisory CVSS 10.0) · Published Aug 19, 2026 · updated Aug 21, 2026 (revision 2.0)

The vendor’s rating applies to the whole advisory and can differ from this CVE’s own CVSS severity. Where this comes from

Something wrong here?