CVE-2026-20359
Received Received - Intake

Insufficiently Protected Credentials in Cisco Crosswork

Publication date: 2026-08-19

Last updated on: 2026-08-19

Assigner: Cisco Systems, Inc.

Description
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Crosswork engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities trackled by CVE-2026-20359 are related to insufficiently protected credentials issues that are grouped under the Common Weakness Enumeration (CWE) CWE-522.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-19
Last Modified
2026-08-19
Generated
2026-08-19
AI Q&A
2026-08-19
EPSS Evaluated
N/A
NVD
CVE-2026-20359
EUVD
EUVD-2026-62567

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
cisco crosswork *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-522 The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-20359 is a vulnerability related to insufficiently protected credentials in Cisco Crosswork products. It falls under the Common Weakness Enumeration (CWE) CWE-522, which refers to weaknesses in authentication mechanisms that could allow unauthorized access.

Impact Analysis

This vulnerability could allow attackers to gain unauthorized access to sensitive data or systems by exploiting weak credential protection. The high CVSS score of 9.9 indicates a critical risk, potentially leading to data breaches, system compromise, or further network infiltration.

Compliance Impact

Insufficiently protected credentials can lead to unauthorized access, which may result in violations of data protection regulations like GDPR or HIPAA. Non-compliance could lead to legal penalties, reputational damage, and loss of trust in handling sensitive data.

Mitigation Strategies

Apply the latest Cisco Crosswork software update addressing CWE-522 credential protection issues. Review and rotate all credentials stored in Cisco Crosswork systems. Monitor Cisco's security advisories for additional mitigation guidance.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-20359. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart