Cisco Crosswork Security Hardening Release: August 2026

criticalCVE-2026-20030 CVE-2026-20357 CVE-2026-20358 CVE-2026-20359

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Crosswork engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. These vulnerabilities were found during internal testing and are not known to be actively exploited. To assist customers in patching and to streamline the disclosure process, Cisco has grouped these issues by their underlying vulnerability class — Common Weakness Enumeration (CWE) — and assigned a single Common Vulnerabilities and Exposures Identifier (CVE ID) to each CWE grouping. Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-crosswork-UzDTU9Vh Security Impact Rating: Critical CVE: CVE-2026-20030,CVE-2026-20357,CVE-2026-20358,CVE-2026-20359

CSIRTS triage

vendor: Cisco product: Crosswork Remote code execution Privilege escalation Information disclosure

What: Multiple internally discovered vulnerabilities in Crosswork software grouped by CWE classification enabling code execution, privilege escalation, and information disclosure.
Who is affected: Cisco Crosswork deployments are affected.
Urgency: Critical urgency; Cisco has issued critical severity advisory and software hardening release.
Action: Apply Cisco Crosswork software updates addressing CVE-2026-20030, CVE-2026-20357, CVE-2026-20358, and CVE-2026-20359.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch Crosswork

Get an email when a new Crosswork advisory drops — max one per day, one-click unsubscribe.

Details

Source: Cisco Security Advisories (INTL · vendor-psirt · site)
Severity: critical
Published: 2026-08-21
Exploitation: Not in CISA KEV at last sync

Original advisory: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-crosswork-UzDTU9Vh?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Crosswork%20Security%20Hardening%20Release:%20August%202026%26vs_k=1

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

Low exploitation riskCVE-2026-200300.55% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 43% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-203570.55% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 44% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-203580.46% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 38% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-203590.36% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 29% of all EPSS-scored CVEs.

Referenced CVEs

CVE	CSIRTS overview	External
CVE-2026-20030	coverage & exploitation status	NVD · CVE.org
CVE-2026-20357	coverage & exploitation status	NVD · CVE.org
CVE-2026-20358	coverage & exploitation status	NVD · CVE.org
CVE-2026-20359	coverage & exploitation status	NVD · CVE.org

Same CVEs, other sources

How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.