CVE-2026-20358Control externo de archivos en Cisco Crosswork
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Crosswork engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20358 are related to external control of the file system issues that are grouped Common Weakness Enumeration (CWE) CWE-73.
Ver en NVDAnálisis
Cisco Crosswork presenta una vulnerabilidad crítica de control externo del sistema de archivos que permite a un atacante manipular rutas y archivos internos. Con una calificación de 10.0, este fallo permite la lectura o escritura no autorizada de archivos críticos, lo que podría resultar en el compromiso total de la plataforma de automatización de red. Se recomienda aplicar el parche de endurecimiento de software proporcionado por el fabricante de inmediato.
Roles relevantes
Severidad
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:HCWE-73EPSS
Sin puntaje EPSS aún (CVE muy reciente).
Descripción técnica
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Crosswork engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20358 are related to external control of the file system issues that are grouped Common Weakness Enumeration (CWE) CWE-73.