CVE-2026-20357
criticalPriorität · verfolgen · 0OT-Risiko · erhöhtEPSS 0.006 · 49. PerzentilRUUSEPSS · bewertet 2026-10-27
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Crosswork engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20357 are related to missing authentication for critical function issues that are grouped under the Common Weakness Enumeration (CWE) CWE-306.
Behebungen
Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.
Ein Hersteller-Fix ist verfügbar.
- Behoben7.0.0cisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben7.0.1cisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben7.0.2cisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben7.0.3cisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben7.0.4cisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben7.1.0cisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben7.1.1cisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben7.1.2cisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben7.2.0cisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
betroffene Produkte (13)
Betroffene Produkte und Versionsbereiche.
Advisories (1)
Hersteller- und Ökosystem-Meldungen dazu.
- cisco-sa-hardening-crosswork-UzDTU9VhCisco Crosswork Security Hardening Release: August 20262026-08-19csaf · cisco_csafUS
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Crosswork engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. These vulnerabilities were found during internal testing and are not known to be actively exploited. To assist customers in patching and to streamline the disclosure process, Cisco has grouped these issues by their underlying vulnerability class — Common Weakness Enumeration (CWE) — and assigned a single Common Vulnerabilities and Exposures Identifier (CVE ID) to each CWE grouping. Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.
auch bekannt als (1)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (2) nvd
Externe Belege — Patches, Meldungen, Analysen.
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan