CVE-2026-20358
CriticalCVSS 10.0Summary
Vulnerability in Cisco Crosswork related to external control of file system (CWE-73). Discovered during internal security review, fixed in hardening release.
Risk Assessment
Attacker may manipulate file paths, leading to unauthorized data access or system modification.
Recommendation
Install the latest Cisco Crosswork version with security fixes.
Original NVD description (English source)
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Crosswork engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20358 are related to external control of the file system issues that are grouped Common Weakness Enumeration (CWE) CWE-73.