Multiple vulnerabilities in Cisco products (20 August 2026)
Multiple vulnerabilities have been discovered in Cisco products. Some of them allow an attacker to cause arbitrary code execution remotely, privilege escalation and breach of data confidentiality.
CSIRTS triage
- What
- Multiple vulnerabilities across Cisco products allow remote code execution, privilege escalation, and data confidentiality breach.
- Who is affected
- Organizations deploying various Cisco products.
- Urgency
- High priority; RCE and privilege escalation indicate critical severity across Cisco product line.
- Action
- Identify affected Cisco products and apply vendor security updates for all eight CVEs listed.
AI-assisted analysis generated from the source advisory — verify against the original.
Details
Original advisory: https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1058/
Exploitation outlook
EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.
- Low exploitation riskCVE-2026-203170.44% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 37% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-203580.46% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 38% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-203590.36% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 29% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-202310.50% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 41% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-203180.35% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 27% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-200300.55% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 43% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-203150.41% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 34% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-203200.39% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 31% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-203570.55% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 44% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-203190.37% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 29% of all EPSS-scored CVEs.
Referenced CVEs
| CVE | CSIRTS overview | External |
|---|---|---|
| CVE-2026-20317 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-20358 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-20359 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-20231 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-20318 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-20030 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-20315 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-20320 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-20357 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-20319 | coverage & exploitation status | NVD · CVE.org |
Same CVEs, other sources
How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.
- criticalCisco Crosswork Security Hardening Release: August 2026cisco-psirt
- unknownNCSC-2026-0323 [1.00] [M/H] Vulnerabilities fixed in Cisco Secure Workloadncsc-nl
- high[NEW] [high] Cisco Secure Workload: Multiple vulnerabilitiescert-bund
- criticalCVE-2026-20359: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Cro…nvd
- criticalCVE-2026-20358: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Cro…nvd
- criticalCVE-2026-20357: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Cro…nvd
- highCVE-2026-20320: A vulnerability in the Open Client Interface (OCI) XML Parser of Cisco BroadWorks could allow …nvd
- highCVE-2026-20319: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Sec…nvd
- criticalCVE-2026-20318: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Sec…nvd
- criticalCVE-2026-20317: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Sec…nvd
- criticalCVE-2026-20315: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Sec…nvd
- criticalCVE-2026-20231: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Sec…nvd
Recent advisories for Cisco products
A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.
- criticalCVE-2026-20359: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Cro…nvd · 2026-08-19
- criticalCVE-2026-20358: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Cro…nvd · 2026-08-19
- criticalCVE-2026-20357: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Cro…nvd · 2026-08-19
- highCVE-2026-20319: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Sec…nvd · 2026-08-19
- criticalCVE-2026-20318: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Sec…nvd · 2026-08-19
- criticalCVE-2026-20317: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Sec…nvd · 2026-08-19
More from CERT-FR Avis de sécurité
- unknownMultiple vulnerabilities in Keycloak (August 25, 2026)2026-08-25
- unknownMultiple vulnerabilities in Cisco IOS XE (August 25, 2026)2026-08-25
- unknownMultiple vulnerabilities in LibreNMS (August 24, 2026)2026-08-24
- unknownMultiple vulnerabilities in Metabase (August 24, 2026)2026-08-24
- unknownVulnerability in SPIP (August 21, 2026)2026-08-21