Summary

CVE-2026-20267

Cisco IOS XE Software contains multiple internally discovered vulnerabilities characterized by improper access control (CWE-284). These vulnerabilities were identified during an internal security review and addressed through software hardening releases, carrying a CVSS base score of 9.0.

Affected products:

• IOS XE Software

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-20267

Related in this roundup: CVE-2026-20272, CVE-2026-20124, CVE-2026-20263, CVE-2026-20268, CVE-2026-20269, CVE-2026-20271, CVE-2026-20273, CVE-2026-20311, CVE-2026-20308.

CVE-2026-20272

CVE-2026-20272 represents a critical vulnerability in Cisco IOS XE Software, identified through internal security reviews as an issue involving improper neutralization of special elements, classified under CWE-74. With a CVSS base score of 9.8, the vulnerability allows for potential remote command injection, requiring immediate patching as part of Cisco's software hardening releases.

Affected products:

• IOS XE Software

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-20272

Related in this roundup: CVE-2026-20267, CVE-2026-20124, CVE-2026-20263, CVE-2026-20268, CVE-2026-20269, CVE-2026-20271, CVE-2026-20273, CVE-2026-20311, CVE-2026-20308.

CVE-2026-20310

Cisco Catalyst SD-WAN is affected by a vulnerability (CVE-2026-20310) resulting from improper link resolution before file access, categorized as CWE-59. This internally discovered issue prompted security hardening updates for the affected platform.

Affected products:

• Catalyst SD-WAN

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-20310

Related in this roundup: CVE-2026-20312, CVE-2026-20313.

CVE-2026-20124

CVE-2026-20124 is a denial of service vulnerability in the SNMP subsystem of Cisco IOS XE Software. An authenticated remote attacker with valid SNMP community strings (v1/v2c) or credentials (v3) can send a malformed SNMP request, causing the device to unexpectedly reload. Detection should focus on monitoring SNMP request traffic for anomalies or malformed packets targeting the SNMP subsystem.

Affected products:

• IOS XE Software

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-20124

Related in this roundup: CVE-2026-20267, CVE-2026-20272, CVE-2026-20263, CVE-2026-20268, CVE-2026-20269, CVE-2026-20271, CVE-2026-20273, CVE-2026-20311, CVE-2026-20308.

CVE-2026-20200

Cisco IMC contains a vulnerability in its web-based management interface stemming from improper input validation. An authenticated remote attacker with low privileges can leverage this flaw to perform command injection, resulting in the execution of arbitrary commands with root-level privileges on the underlying operating system.

Affected products:

• Integrated Management Controller

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-20200

Related in this roundup: CVE-2026-20198.

CVE-2026-20263

A vulnerability in the Blocks Extensible Exchange Protocol (BEEP) feature of Cisco IOS XE Software allows unauthenticated remote attackers to trigger a device reload via a crafted BEEP SOAP request, resulting in a denial-of-service (DoS) condition.

Affected products:

• IOS XE Software

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-20263

Related in this roundup: CVE-2026-20267, CVE-2026-20272, CVE-2026-20124, CVE-2026-20268, CVE-2026-20269, CVE-2026-20271, CVE-2026-20273, CVE-2026-20311, CVE-2026-20308.

CVE-2026-20268

Cisco IOS XE Software contains vulnerabilities related to improper restriction of operations within the bounds of a memory buffer, categorized under CWE-119. These issues were discovered during an internal security review and addressed via software hardening releases, carrying a CVSS v3.1 base score of 8.6.

Affected products:

• IOS XE Software

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-20268

Related in this roundup: CVE-2026-20267, CVE-2026-20272, CVE-2026-20124, CVE-2026-20263, CVE-2026-20269, CVE-2026-20271, CVE-2026-20273, CVE-2026-20311, CVE-2026-20308.

CVE-2026-20269

Cisco IOS XE Software contains multiple internally discovered vulnerabilities related to improper control of a resource through its lifetime, classified under CWE-664. These issues were identified during a proactive internal security review and have been addressed in software hardening releases.

Affected products:

• IOS XE Software

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-20269

Related in this roundup: CVE-2026-20267, CVE-2026-20272, CVE-2026-20124, CVE-2026-20263, CVE-2026-20268, CVE-2026-20271, CVE-2026-20273, CVE-2026-20311, CVE-2026-20308.

CVE-2026-20271

Cisco IOS XE Software contains multiple vulnerabilities related to insufficient control flow management, categorized under CWE-691. These vulnerabilities were identified through an internal security review, and Cisco has released software updates to address the underlying issues.

Affected products:

• IOS XE Software

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-20271

Related in this roundup: CVE-2026-20267, CVE-2026-20272, CVE-2026-20124, CVE-2026-20263, CVE-2026-20268, CVE-2026-20269, CVE-2026-20273, CVE-2026-20311, CVE-2026-20308.

CVE-2026-20273

CVE-2026-20273 refers to an improper input validation vulnerability (CWE-20) in Cisco IOS XE Software. With a CVSS base score of 8.6, this vulnerability is exploitable remotely by an unauthenticated attacker, potentially leading to a denial-of-service condition (AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H).

Affected products:

• IOS XE Software

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-20273

Related in this roundup: CVE-2026-20267, CVE-2026-20272, CVE-2026-20124, CVE-2026-20263, CVE-2026-20268, CVE-2026-20269, CVE-2026-20271, CVE-2026-20311, CVE-2026-20308.

CVE-2026-20301

A vulnerability in the Extensible Messaging Client Protocol (XMCP) implementation within Cisco IOS and IOS XE software allows unauthenticated, remote attackers to trigger a device reload via malformed packets, resulting in a denial-of-service condition.

Affected products:

• IOS Software
• IOS XE Software

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-20301

CVE-2026-20312

Cisco Catalyst SD-WAN software contains a vulnerability identified as CVE-2026-20312 involving the cleartext storage of sensitive information, classified under CWE-312. This vulnerability was identified during an internal security review and addressed through a software hardening release.

Affected products:

• Catalyst SD-WAN

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-20312

Related in this roundup: CVE-2026-20310, CVE-2026-20313.

CVE-2026-20313

Cisco Catalyst SD-WAN is affected by a vulnerability involving improper link resolution before file access, categorized under CWE-1284. This vulnerability was identified during an internal security review and addressed via software hardening releases.

Affected products:

• Catalyst SD-WAN

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-20313

Related in this roundup: CVE-2026-20310, CVE-2026-20312.

CVE-2026-20311

A vulnerability in the web-based management interface of Cisco IOS XE Software allows an authenticated, low-privileged remote attacker to trigger a denial-of-service condition. By submitting a malformed certificate to the interface, an attacker can cause the device to reload, resulting in an unexpected service disruption. Cisco has released software updates to address this flaw.

Affected products:

• IOS XE Software

Source: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-xe-webui-dos-PtAODAWW?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20IOS%20XE%20Software%20Web-Based%20Management%20Interface%20Denial%20of%20Service%20Vulnerability%26vs_k=1

Related in this roundup: CVE-2026-20267, CVE-2026-20272, CVE-2026-20124, CVE-2026-20263, CVE-2026-20268, CVE-2026-20269, CVE-2026-20271, CVE-2026-20273, CVE-2026-20308.

CVE-2026-20198

A cross-site scripting (XSS) vulnerability exists in the web-based management interface of the Cisco Integrated Management Controller due to improper input validation. An authenticated remote attacker can exploit this by convincing a user to interact with a malicious link, potentially leading to arbitrary script execution within the victim's browser context.

Affected products:

• Integrated Management Controller

Source: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cimc-xss-7EhBFxBp?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Integrated%20Management%20Controller%20Cross-Site%20Scripting%20Vulnerability%26vs_k=1

Related in this roundup: CVE-2026-20200.

CVE-2026-20289

A vulnerability in the logging subsystem of Cisco RoomOS allows an authenticated, local attacker with low privileges to access sensitive information, such as user login credentials, by enabling specific logging levels and accessing system logs. There are no workarounds available, and patching is required.

Affected products:

• RoomOS

Source: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-roomos-infodisc-qBXjfmWm?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20RoomOS%20Logging%20Subsystem%20Information%20Disclosure%20Vulnerability%26vs_k=1

Related in this roundup: CVE-2026-20302.

CVE-2026-20294

An information disclosure vulnerability exists in the web-based management interface of Cisco Catalyst SD-WAN Manager due to insufficient access control on specific template types. Authenticated attackers with low privileges can exploit this to view sensitive authentication credentials in clear text within local or remote logs, potentially leading to escalation of privilege and further infrastructure compromise.

Affected products:

• Catalyst SD-WAN Manager

Source: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-infodis-SPuJBDCe?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Catalyst%20SD-WAN%20Manager%20Information%20Disclosure%20Vulnerability%26vs_k=1

CVE-2026-20028

A vulnerability in the Cisco Terminal Services Agent network driver allows an authenticated remote attacker with user-level credentials to bypass firewall rules by incorrectly mapping network connections to user accounts, effectively inheriting the firewall policy of another user.

Affected products:

• Terminal Services Agent

Source: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ts-agent-fw-bypass-MYBTMrev?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Terminal%20Services%20Agent%20Firewall%20Rules%20Bypass%20Vulnerability%26vs_k=1

CVE-2026-20308

An authenticated remote attacker with low privileges can trigger a denial of service (DoS) condition in the web-based management interface of Cisco IOS XE Software by sending crafted input, resulting in the interface becoming unresponsive due to insufficient input validation.

Affected products:

• IOS XE Software

Source: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webui-dos-qdc7qx3?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20IOS%20XE%20Software%20Web-Based%20Management%20Interface%20Denial%20of%20Service%20Vulnerability%26vs_k=1

Related in this roundup: CVE-2026-20267, CVE-2026-20272, CVE-2026-20124, CVE-2026-20263, CVE-2026-20268, CVE-2026-20269, CVE-2026-20271, CVE-2026-20273, CVE-2026-20311.

CVE-2026-20337

CVE-2026-20337 is an out-of-bounds write vulnerability in the ClamAV zip archive parser caused by improper boundary checks. An unauthenticated remote attacker can exploit this by submitting a specially crafted zip file for scanning, triggering a process termination that results in a Denial of Service (DoS) condition.

Affected products:

• ClamAV

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-20337

Related in this roundup: CVE-2026-20338, CVE-2026-20339, CVE-2026-20345, CVE-2026-20346, CVE-2026-20347, CVE-2026-20348.

CVE-2026-20338

A vulnerability in the ClamAV zip archive parser exists due to improper memory handling when processing malicious zip files. An unauthenticated, remote attacker can exploit this via a crafted file submission to trigger a double-free condition, causing the scanning process to crash and resulting in a denial-of-service state.

Affected products:

• ClamAV

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-20338

Related in this roundup: CVE-2026-20337, CVE-2026-20339, CVE-2026-20345, CVE-2026-20346, CVE-2026-20347, CVE-2026-20348.

CVE-2026-20339

CVE-2026-20339 is a vulnerability within the ClamAV PESpin file format parser caused by improper boundary checks. An unauthenticated remote attacker can submit a maliciously crafted file for scanning, triggering an integer overflow and memory corruption. This allows the attacker to terminate the ClamAV scanning process, resulting in a Denial of Service (DoS) condition.

Affected products:

• ClamAV

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-20339

Related in this roundup: CVE-2026-20337, CVE-2026-20338, CVE-2026-20345, CVE-2026-20346, CVE-2026-20347, CVE-2026-20348.

CVE-2026-20345

A vulnerability exists in the GPT file format parser of ClamAV due to improper endian conversion, leading to an out-of-bounds buffer write. An unauthenticated remote attacker can exploit this by submitting a malicious GPT file for scanning, triggering a denial-of-service (DoS) condition via process termination or potential memory corruption.

Affected products:

• ClamAV

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-20345

Related in this roundup: CVE-2026-20337, CVE-2026-20338, CVE-2026-20339, CVE-2026-20346, CVE-2026-20347, CVE-2026-20348.

CVE-2026-20346

CVE-2026-20346 is a vulnerability in the ClamAV PDF file parser caused by improper boundary checks during file scanning. This flaw leads to an out-of-bounds buffer read, which an unauthenticated remote attacker can exploit by submitting a specially crafted PDF file. Successful exploitation allows the attacker to cause a denial-of-service (DoS) condition by crashing the ClamAV scanning process.

Affected products:

• ClamAV

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-20346

Related in this roundup: CVE-2026-20337, CVE-2026-20338, CVE-2026-20339, CVE-2026-20345, CVE-2026-20347, CVE-2026-20348.

CVE-2026-20347

A vulnerability in the Mach-O file format parser within ClamAV allows an unauthenticated remote attacker to trigger an out-of-bounds read by submitting a maliciously crafted file. Successful exploitation leads to a crash of the scanning process, resulting in a denial-of-service (DoS) condition.

Affected products:

• ClamAV

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-20347

Related in this roundup: CVE-2026-20337, CVE-2026-20338, CVE-2026-20339, CVE-2026-20345, CVE-2026-20346, CVE-2026-20348.

CVE-2026-20348

CVE-2026-20348 describes a memory corruption vulnerability in the XAR file parser of ClamAV caused by improper boundary checks. An unauthenticated remote attacker can exploit this by submitting a crafted XAR file for scanning, leading to a denial-of-service (DoS) condition via the termination of the scanning process.

Affected products:

• ClamAV

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-20348

Related in this roundup: CVE-2026-20337, CVE-2026-20338, CVE-2026-20339, CVE-2026-20345, CVE-2026-20346, CVE-2026-20347.

CVE-2026-20349

A vulnerability in the Remote Access SSL VPN service of Cisco Secure Firewall ASA and FTD software allows an unauthenticated, remote attacker to trigger an unexpected device reload via a crafted HTTP request. This results in a denial of service (DoS) condition due to improper error handling during request processing.

Affected products:

• Adaptive Security Appliance
• Secure Firewall Threat Defense

Source: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-vpn-dos-dzv4mQFF?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Secure%20Firewall%20Adaptive%20Security%20Appliance%20and%20Secure%20Firewall%20Threat%20Defense%20Software%20Remote%20Access%20SSL%20VPN%20Denial%20of%20Service%20Vulnerability%26vs_k=1

CVE-2026-20232

Cisco Industrial Ethernet 1000 Series Switches contain a stored cross-site scripting (XSS) vulnerability in the web-based management interface. The flaw arises from improper input validation, allowing an authenticated remote attacker to inject arbitrary scripts that execute in the context of other users viewing the affected interface pages.

Affected products:

• Industrial Ethernet 1000 Series Switches

Source: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ie1k-NgXUFF52?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Industrial%20Ethernet%201000%20Series%20Switches%20Stored%20Cross-Site%20Scripting%20Vulnerability%26vs_k=1

Related in this roundup: CVE-2026-20177.

CVE-2026-20314

Cisco Packaged Contact Center Enterprise and Unified Contact Center Enterprise contain an SSRF vulnerability due to improper input validation of HTTP requests. An authenticated remote attacker can exploit this by sending a crafted HTTP request to the device, allowing the execution of arbitrary network requests from the context of the vulnerable system.

Affected products:

• Packaged Contact Center Enterprise
• Unified Contact Center Enterprise

Source: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucce-pcce-ssrf-TghHxD?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Packaged%20Contact%20Center%20Enterprise%20and%20Cisco%20Unified%20Contact%20Center%20Enterprise%20Server-Side%20Request%20Forgery%20Vulnerability%26vs_k=1

CVE-2026-20327

Cisco Unified Intelligence Center contains a blind SQL injection vulnerability in its web-based management interface. An authenticated, local attacker with valid credentials can exploit insufficient input validation to send a crafted request, allowing unauthorized access to read the contents of the device's internal database.

Affected products:

• Unified Intelligence Center

Source: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cuic-sql-inject-2qbfWSm5?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Unified%20Intelligence%20Center%20SQL%20Injection%20Vulnerability%26vs_k=1

CVE-2026-20177

A vulnerability in Cisco Industrial Ethernet 1000 Series Switches allows an unauthenticated, remote attacker to trigger a denial-of-service condition for management services including the web GUI, SSH, and API. The vulnerability is caused by insufficient protection against management plane flooding, where a high volume of ICMP, SSH, or HTTP traffic causes excessive CPU utilization. While management access is impacted, transit data traffic is not affected.

Affected products:

• Industrial Ethernet 1000 Series Switches

Source: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ie1k-uxq86Lnx?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Industrial%20Ethernet%201000%20Series%20Switches%20Denial%20of%20Service%20Vulnerability%26vs_k=1

Related in this roundup: CVE-2026-20232.

CVE-2026-20302

A vulnerability in the USB driver of Cisco RoomOS allows an unauthenticated, local attacker with physical access to a USB port to trigger a buffer overflow condition. Successful exploitation enables the execution of arbitrary code with root privileges.

Affected products:

• RoomOS

Source: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-roomos-bof-vTMANZgu?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20RoomOS%20Stack%20Overflow%20Vulnerability%26vs_k=1

Related in this roundup: CVE-2026-20289.

CVE-2026-20320

A high-severity XML External Entity (XXE) vulnerability in the Open Client Interface (OCI) XML parser of Cisco BroadWorks allows unauthenticated remote attackers to read sensitive configuration files. The vulnerability stems from improper XML parsing where external entity resolution is enabled by default. Attackers can exploit this by sending crafted XML messages to the OCI-P service, potentially leaking filesystem data with the privileges of the BroadWorks service user.

Affected products:

• BroadWorks

Source: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-bworks-xxe-uwUd7CEt?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20BroadWorks%20Out-of-Band%20Blind%20XML%20External%20Entity%20Injection%20Vulnerability%26vs_k=1

CVE-2026-20030

CVE-2026-20030 represents a vulnerability in Cisco Crosswork related to improper neutralization of special elements used in a SQL command, categorized under CWE-89. This vulnerability allows for potential SQL injection attacks and carries a critical CVSS v3.1 base score of 10.0.

Affected products:

• Crosswork

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-20030

Related in this roundup: CVE-2026-20357.

CVE-2026-20231

CVE-2026-20231 identifies a vulnerability in Cisco Secure Workload related to the improper neutralization of special elements, categorized under CWE-74. This vulnerability was internally discovered during a security review and addressed via a software hardening release. The vulnerability carries a high CVSS base score of 9.9.

Affected products:

• Secure Workload

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-20231

Related in this roundup: CVE-2026-20317.

CVE-2026-20315

CVE-2026-20315 refers to multiple improper access control vulnerabilities identified in Cisco Secure Workload. These vulnerabilities have a CVSS base score of 10.0, indicating a critical severity that could allow an unauthenticated attacker to gain unauthorized access or perform actions with elevated privileges within the application environment. Security teams should prioritize patching affected versions identified in the vendor advisory.

Affected products:

• Cisco Secure Workload (2.0.1.34, 2.0.2.20, 2.1.1.29, 2.1.1.31, 2.1.1.33, 2.2.1.35, 2.2.1.39, 2.2.1.41, 2.3.1.41, 2.3.1.45, 2.3.1.49, 2.3.1.50, 2.3.1.51, 2.3.1.52, 2.3.1.53, 1.103.1.12, 3.1.1.53, 3.1.1.54, 3.1.1.55, 3.1.1.59, 3.1.1.61, 3.1.1.65, 3.1.1.67, 3.1.1.70, 3.2.1.18, 3.2.1.19, 3.2.1.20, 3.2.1.28, 3.3.2.12, 3.3.2.16, 3.3.2.23, 3.3.2.28, 3.3.2.33, 3.3.2.42, 3.3.2.50, 3.4.1.1, 3.4.1.6, 3.4.1.19, 3.4.1.28, 3.4.1.34, 3.4.1.35, 3.5.1.1, 3.5.1.2, 3.5.1.17, 3.5.1.20, 3.5.1.30)

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-20315

Related in this roundup: CVE-2026-20318.

CVE-2026-20317

CVE-2026-20317 identifies a critical improper authentication vulnerability (CWE-287) in Cisco Secure Workload. With a CVSS 3.1 base score of 10.0, the vulnerability allows for unauthenticated, remote exploitation that can impact the confidentiality, integrity, or availability of the affected system. Detection engineers should ensure that instances of Cisco Secure Workload are updated to the latest hardening release provided by the vendor.

Affected products:

• Secure Workload

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-20317

Related in this roundup: CVE-2026-20231.

CVE-2026-20318

CVE-2026-20318 describes an improper input validation vulnerability (CWE-20) affecting Cisco Secure Workload. The vulnerability, which carries a CVSS base score of 9.6, may allow for unauthorized integrity or availability impacts. It was discovered during an internal security review and addressed through a software hardening release.

Affected products:

• Cisco Secure Workload

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-20318

Related in this roundup: CVE-2026-20315.

CVE-2026-20357

CVE-2026-20357 identifies a missing authentication vulnerability in Cisco Crosswork. This flaw, categorized under CWE-306, allows unauthenticated attackers to perform critical functions, warranting a CVSS v3.1 base score of 10.0.

Affected products:

• Crosswork

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-20357

Related in this roundup: CVE-2026-20030.

CVE-2026-20358

CVE-2026-20358 is a critical vulnerability (CVSS 10.0) identified in Cisco Crosswork Planning that allows for external control of file names or paths (CWE-73). An attacker could exploit this vulnerability to achieve unauthorized file system access, potentially leading to significant integrity and availability impacts.

Affected products:

• Cisco Crosswork Planning (7.0.0, 7.0.1, 7.0.2, 7.0.3, 7.0.4, 7.1.0, 7.1.1, 7.1.2, 7.2.0)

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-20358