CVE-2026-20030Inyección SQL en Cisco Crosswork
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Crosswork engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20030 are related to improper neutralization of special elements used in a SQL command issues that are grouped under the Common Weakness Enumeration (CWE) CWE-89.
Ver en NVDAnálisis
Cisco Crosswork presenta una vulnerabilidad de SQL Injection que permite a un atacante ejecutar comandos maliciosos directamente en la base de datos. El impacto puede resultar en el acceso no autorizado a datos sensibles y la toma de control total de la infraestructura de automatización de red. Es fundamental aplicar los parches de seguridad para evitar brechas en entornos de backend y nube.
Roles relevantes
Severidad
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:HCWE-89EPSS
Sin puntaje EPSS aún (CVE muy reciente).
Descripción técnica
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Crosswork engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20030 are related to improper neutralization of special elements used in a SQL command issues that are grouped under the Common Weakness Enumeration (CWE) CWE-89.