Cisco Advance Notification for Publication of August 19, 2026, Security Advisories
Cisco PSIRT's advance notice previews August 19, 2026 advisories including Critical CVSS 10.0 hardening releases for Crosswork and Secure Workload.
Cisco PSIRT issued an advance notification for security advisories published August 19, 2026. The batch includes Critical-rated (CVSS 10.0) hardening releases for Cisco Crosswork and Cisco Secure Workload, a High-severity blind XML External Entity injection in BroadWorks (CVE-2026-20320, CVSS 7.5), a Medium SQL injection in Unified Intelligence Center (CVE-2026-20327, CVSS 6.5), and a RoomOS stack overflow. Full details and fixes follow in the individual advisories.
- Critical CVSS 10.0 issues in Crosswork and Secure Workload releases
- BroadWorks blind XXE rated High (CVSS 7.5)
- Unified Intelligence Center SQL injection rated Medium (6.5)
- RoomOS stack overflow advisory previewed
- CVEs
- CVE-2026-20030CVE-2026-20357CVE-2026-20358CVE-2026-20359CVE-2026-20231CVE-2026-20315CVE-2026-20317CVE-2026-20318CVE-2026-20319CVE-2026-20320CVE-2026-20327
- Vendors
- Cisco
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2026-20357+3 related CVEs | Missing Authentication for Critical Functions in Cisco Crosswork | 10.0 group max | <1% | ||
CVE-2026-20315+2 related CVEs | Unauthenticated Improper Access Control in Cisco Secure Workload | 10.0 group max | <1% | ||
CVE-2026-20317+1 related CVE | Improper Authentication Flaws in Cisco Secure Workload Score CVSS 10.0 | 10.0 group max | <1% | ||
| CVE-2026-20320 | Unauthenticated XXE File Read in Cisco BroadWorks OCI-P Service | 7.5 | <1% | ||
| CVE-2026-20327 | Authenticated Blind SQL Injection in Cisco Unified Intelligence Center Web Interface | 6.5 | <1% |
From the original article
On August 19, 2026, the Cisco Product Security Incident Response Team (PSIRT) published the following advisories: Cisco Security Advisory CVE ID Security Impact Rating CVSS Base Score Cisco Crosswork Security Hardening Release: August 2026 CVE-2026-20030 CVE-2026-20357 CVE-2026-20358 CVE-2026-20359 Critical 10.
sec.cloudapps.cisco.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.