CVE-2026-20358Disclosure

LOWCVSS 10.0 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Crosswork engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20358 are related to external control of the file system issues that are grouped Common Weakness Enumeration (CWE) CWE-73.

Back to dashboard

0.5/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-73

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

Patch or workaround signal is available
3 mentions across 3 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 2 signals
Technical details provided in 2 signals
Disclosure: 2 classified signals
General: 1 classified signal
Peaked 2d ago at 1 mentions (2026-08-19); latest day: 1
3 total mentions across 3 days

Deep dive

Activity timeline3 mentions / 3d

Signal classification2 categories

Disclosure

266.7%

General

133.3%

Referenced assets1 URL

By indicator

https://sec.kaitan.id/cves/CVE-2026-20358

Classification over time

Date	Total	Labels

2026-08-19	1	Disclosure1
2026-08-20	1	General1
2026-08-24	1	Disclosure1

Full discourse3 posts

GovCERT.CZ@GOVCERT_CZ41d
Disclosure
🚨 Upozorňujeme na několik zranitelností v Cisco Crosswork, CVE-2026-20030, CVE-2026-20357, CVE-2026-20358, CVE-2026-20359. V produktech Cisco Crosswork Data Gateway, Crosswork Network Controller a Crosswork Planning byly identifikovány čtyři kritické zranitelnosti, které se projevují bez ohledu na konfiguraci zařízení. Jedná se o SQL Injection (CVE-2026-20030, CVSS 10.0), chybějící autentizaci pro kritickou funkci (CVE-2026-20357, CVSS 10.0), možnost externí kontroly souborového systému (CVE-2026-20358, CVSS 10.0) a nedostatečně chráněné přihlašovací údaje (CVE-2026-20359, CVSS 9.9). Úspěšné zneužití může útočníkovi umožnit neoprávněný přístup ke kritickým funkcím systému, manipulaci s daty, přístup k souborovému systému, kompromitaci přihlašovacích údajů a potenciálně úplné ovládnutí postiženého prostředí. Zranitelnosti ovlivňují Cisco Crosswork Release 7.2.1 a starší verze. 📌Doporučujeme aktualizovat na verzi 7.2.1-SP.
Post summary
The post announces four critical Cisco Crosswork CVEs, provides detailed technical information, and recommends updating to a patched version.
11010850
4.3K followersView on X
ExploitGrid@exploitgrid45d
General
🛡️ ExploitGrid Daily Threat Digest Top Vulnerabilities (CVEs) of the day CVE-2026-20030 CVE-2026-20315 CVE-2026-20317 CVE-2026-20357 CVE-2026-20358 ..🧵👇
Post summary
The tweet merely enumerates five CVE identifiers with no additional exploit, patch, or technical details.
1000033
37 followersView on X
Kaitan ID Security@KaitanSecurity46d
Disclosure
🚨 CRITICAL — CVE-2026-20358 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Crosswork engineering team h… CVSS 10.0 🔴 No patch yet Full analysis → https://sec.kaitan.id/cves/CVE-2026-20358 #Cisco #CyberSecurity #InfoSec
Post summary
A critical Cisco vulnerability (CVE‑2026‑20358) is disclosed with a CVSS 10.0 score and no patch yet; a full analysis is available via the provided link.
0000039
82 followersView on X

Explore more

Back to dashboard