Missing Authentication Vulnerability in Cisco Crosswork Platform
CVE-2026-20357

10CRITICAL

Key Information:

Vendor

Cisco
Status
Cisco Crosswork Planning
Vendor
CVE Published:
19 August 2026

Badges

👾 Exploit Exists

What is CVE-2026-20357?

A security oversight in Cisco Crosswork has been identified, stemming from missing authentication for critical functions. This vulnerability could potentially allow unauthorized access to sensitive operations, highlighting the need for robust authentication mechanisms. To mitigate this risk, Cisco has released a software hardening update that addresses these weaknesses, emphasizing their commitment to maintaining product security and quality.

Affected Version(s)

Cisco Crosswork Planning 7.0.2

Cisco Crosswork Planning 7.1.0

Cisco Crosswork Planning 7.0.0

References

https://sec.cloudapps.cisco.com/security/center/content/C...

CVSS V3.1

Score:
10
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.