CVE-2026-20030SQL Injection in Cisco Crosswork
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Crosswork engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20030 are related to improper neutralization of special elements used in a SQL command issues that are grouped under the Common Weakness Enumeration (CWE) CWE-89.
View on NVDAnalysis
Cisco Crosswork presenta una vulnerabilidad de SQL Injection que permite a un atacante ejecutar comandos maliciosos directamente en la base de datos. El impacto puede resultar en el acceso no autorizado a datos sensibles y la toma de control total de la infraestructura de automatización de red. Es fundamental aplicar los parches de seguridad para evitar brechas en entornos de backend y nube.
Relevant roles
Severity
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:HCWE-89EPSS
No EPSS score yet (CVE may be too fresh).
Technical description
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Crosswork engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20030 are related to improper neutralization of special elements used in a SQL command issues that are grouped under the Common Weakness Enumeration (CWE) CWE-89.