CVE-2026-20302
On August 19, 2026, the Cisco Product Security Incident Response Team (PSIRT) published the following advisories: Cisco Security Advisory CVE ID Security Impact Rating CVSS Base Score Cisco Crosswork Security Hardening Release: August 2026 CVE-2026-20030 CVE-2026-20357 CVE-2026-20358 CVE-2026-20359 Critical 10.0 Cisco Secure Workload Software Security Hardening Release: August 2026 CVE-2026-20231 CVE-2026-20315 CVE-2026-20317 CVE-2026-20318 CVE-2026-20319 Critical 10.0 Cisco BroadWorks Out-of-Band Blind XML External Entity Injection Vulnerability CVE-2026-20320 High 7.5 Cisco Unified Intelligence Center SQL Injection Vulnerability CVE-2026-20327 Medium 6.5 Cisco RoomOS Stack Overflow Vulnerability CVE-2026-20302 Medium 6.1 Cisco Industrial Ethernet 1000 Series Switches Stored Cross-Site Scripting Vulnerability CVE-2026-20232 Medium 5.4 Cisco Industrial Ethernet 1000 Series Switches Denial of Service Vulnerability CVE-2026-20177 Medium 5.3 Cisco Packaged Contact Center Enterprise and Cisco Unified Contact Center Enterprise Server-Side Request Forgery Vulnerability CVE-2026-20314 Medium 5.0 To fully remediate the vulnerabilities that were disclosed on August 19, 2026, Cisco strongly recommends that customers upgrade to the fixed software that is indicated in the advisories. For more information about changes in Cisco PSIRT vulnerability disclosure, see Strengthening the Foundation: A Predictable, Customer-Focused Response to AI-Accelerated Vulnerability Discovery . Security Impact Rating: Informational
CSIRTS triage
- What
- Cisco PSIRT advance notification of upcoming security advisories for multiple product lines.
- Who is affected
- Organizations using Cisco BroadWorks, Industrial Ethernet switches, Contact Center, RoomOS, Secure Firewall, Secure Workload, and Unified Intelligence Center products.
- Urgency
- Medium urgency as an advance notice; detailed remediation urgency will depend on the severity of individual advisories published August 19, 2026.
- Action
- Monitor Cisco PSIRT advisories published August 19, 2026 and plan upgrades to fixed software versions.
AI-assisted analysis generated from the source advisory — verify against the original.
⚡ Watch CVE-2026-20302
Get an email if CVE-2026-20302 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.
Exploitation outlook
- Low exploitation risk0.18% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 8% of all EPSS-scored CVEs.
Advisory coverage (3)
- mediumCVE-2026-20302: A vulnerability in the USB driver of Cisco RoomOS could allow an unauthenticated, local attack…nvd · 2026-08-19
- criticalCisco Advance Notification for Publication of August 19, 2026, Security Advisoriescisco-psirt · 2026-08-19
- mediumCisco RoomOS Stack Overflow Vulnerabilitycisco-psirt · 2026-08-19
External references
Embed the live status
— this badge updates automatically when the KEV or exploit status changes. How to embed it →
[](https://www.csirts.com/cve/CVE-2026-20302)