← nejvýznamnější zprávy · všechny zprávy

poslední zpráva · zachyceno

SPOJENO PŘES CVE EPSS 0.01 (nejvyšší)

Cisco Crosswork Security Hardening Release: August 2026

Classification: Severe, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 10.0, CVEs: CVE-2026-20030, CVE-2026-20357, CVE-2026-20358, CVE-2026-20359, Summary: These vulnerabilities affect the following Cisco Crosswork platforms, regardless of device configuration: Crosswork Data Gateway Crosswork Network Controller Crosswork Planning These vulnerabilities were found during internal testing and are not known to be actively exploited.

Číst originál na NCSC-FI →

2 zprávy z 2 zdrojů · první CZ · EN/orig

Cisco FI US

CVE v události 4

CVEhodnoceníKEVEPSS
CVE-2026-20030 10.0 3.1 · cisco – 0.01
CVE-2026-20357 10.0 3.1 · cisco – 0.01
CVE-2026-20358 10.0 3.1 · cisco – 0.00
CVE-2026-20359 9.9 3.1 · cisco – 0.00

Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE. Advisory v textu uvádí CVSS 10.0.

Jak se o tom psalo 2

  1. · zachyceno · NCSC-FI FI nadpis události

    Cisco Crosswork Security Hardening Release: August 2026

    Classification: Severe, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 10.0, CVEs: CVE-2026-20030, CVE-2026-20357, CVE-2026-20358, CVE-2026-20359, Summary: These vulnerabilities affect the following Cisco Crosswork platforms, regardless of device configuration: Crosswork Data Gateway Crosswork Network Controller Crosswork Planning These vulnerabilities were found during internal testing and are not known to be actively exploited.

  2. · Cisco PSIRT US

    Cisco Crosswork Security Hardening Release: August 2026

    As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Crosswork engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. These vulnerabilities were found during internal testing and are not known to be actively exploited. To assist customers in patching and to streamline the disclosure process, Cisco has grouped these issues by…