CVE-2026-20358External file system control in Cisco Crosswork
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Crosswork engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20358 are related to external control of the file system issues that are grouped Common Weakness Enumeration (CWE) CWE-73.
View on NVDAnalysis
Cisco Crosswork presenta una vulnerabilidad crítica de control externo del sistema de archivos que permite a un atacante manipular rutas y archivos internos. Con una calificación de 10.0, este fallo permite la lectura o escritura no autorizada de archivos críticos, lo que podría resultar en el compromiso total de la plataforma de automatización de red. Se recomienda aplicar el parche de endurecimiento de software proporcionado por el fabricante de inmediato.
Relevant roles
Severity
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:HCWE-73EPSS
No EPSS score yet (CVE may be too fresh).
Technical description
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Crosswork engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20358 are related to external control of the file system issues that are grouped Common Weakness Enumeration (CWE) CWE-73.