Monitor vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
10.0
CVE-2026-20030: Cisco Crosswork: SQL Command Injection Risk
CVE-2026-20030 · published 15 days ago
Summary
Cisco Crosswork software may be vulnerable to SQL command injection attacks, which can allow hackers to access sensitive data or take control of the system. This vulnerability was discovered internally and has been addressed in a recent software update. To stay secure, ensure you are running the latest version of Cisco Crosswork software.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| cisco | cisco crosswork planning | 7.0.2 |
Original advisory text
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Crosswork engineering team has conducted a comprehensive internal security review. This review resulted in...
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Crosswork engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.
The vulnerabilities tracked by CVE-2026-20030 are related to improper neutralization of special elements used in a SQL command issues that are grouped under the Common Weakness Enumeration (CWE) CWE-89.
The vulnerabilities tracked by CVE-2026-20030 are related to improper neutralization of special elements used in a SQL command issues that are grouped under the Common Weakness Enumeration (CWE) CWE-89.
Severity
10.0
Critical
CVSS 3.1: 10.0 (MITRE)
Exploitation
EPSS <1%
Type
CWE-89SQL Injection
Timeline
Published19 Aug 2026
Updated3 Sep 2026
First seen19 Aug 2026
Monitor software like this
Free during beta