A critical vulnerability, CVE-2026-20357, has been identified in Cisco Crosswork, affecting the platform's ability to properly authenticate critical functions. This vulnerability, classified under CWE-306, allows unauthorized users to execute critical operations without proper authentication, potentially leading to complete system compromise. The CVSS score of 10.0 reflects the severity of this issue, indicating a critical risk level. All versions of Cisco Crosswork are affected, and systems utilizing this platform are at significant risk if unpatched. Attackers could exploit this vulnerability to gain unauthorized access, leading to data breaches, service disruptions, or further malicious activities. Immediate action is required to mitigate this risk. Users are strongly advised to apply the latest security patches provided by Cisco to address this vulnerability. Organizations should conduct a thorough assessment of their network infrastructure to ensure all instances of Cisco Crosswork are updated. Failure to remediate this issue could result in severe operational and security consequences. It is crucial to follow Cisco's official guidance for patching and configuration updates to prevent exploitation of this vulnerability.
CRITICAL
CVSS 10.0
CVE-2026-20357
2026-08-21
Critical Vulnerability in Cisco Crosswork (CVE-2026-20357)
A critical vulnerability (CVE-2026-20357) with a CVSS score of 10.0 affects Cisco Crosswork. It involves missing authentication for critical functions, allowing unauthorized access and posing a severe risk to affected systems.