Monitor vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.9
CVE-2026-20359: Cisco Crosswork: Insufficiently Protected Credentials
CVE-2026-20359 · published 15 days ago
Summary
Cisco Crosswork users should be aware of a security update that addresses vulnerabilities related to password protection. This update is a proactive measure to strengthen the security of the software. Users should apply the latest hardening release to ensure their system is secure.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| cisco | cisco crosswork planning | 7.0.2 |
Original advisory text
Cisco Crosswork Security Hardening Release: August 2026
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Crosswork engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.
The vulnerabilities trackled by CVE-2026-20359 are related to insufficiently protected credentials issues that are grouped under the Common Weakness Enumeration (CWE) CWE-522.
The vulnerabilities trackled by CVE-2026-20359 are related to insufficiently protected credentials issues that are grouped under the Common Weakness Enumeration (CWE) CWE-522.
Severity
9.9
Critical
CVSS 3.1: 9.9 (MITRE)
Exploitation
EPSS <1%
Type
CWE-522Insufficiently Protected Credentials
Timeline
Published19 Aug 2026
Updated30 Aug 2026
First seen19 Aug 2026
Monitor software like this
Free during beta