AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

CiscoCVE-2026-20030

Cisco Crosswork Planning: SQL injection

Cisco

CVE-2026-20030 · Published Aug 19, 2026 · updated Aug 20, 2026

Critical10.0
No fix yet
Cisco advisory

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Crosswork engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.

The vulnerabilities tracked by CVE-2026-20030 are related to improper neutralization of special elements used in a SQL command issues that are grouped under the Common Weakness Enumeration (CWE) CWE-89.

Affected versions

PackageAffectedFixed in
Cisco Crosswork Planning
Product
<= 7.0.2No fix yet
<= 7.1.0No fix yet
<= 7.0.0No fix yet
<= 7.0.4No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-89

More Cisco advisories

All Cisco
Critical 9.6Aug 19Cisco Secure Workload: improper input validationCVE-2026-20318no fix yetHigh 7.5Aug 19Cisco Secure Workload: memory corruptionCVE-2026-20319no fix yetHigh 7.5Aug 19Cisco BroadWorks: XML external entityCVE-2026-20320no fix yetMedium 6.5Aug 19Cisco Unified Intelligence Center: SQL injectionCVE-2026-20327no fix yetCritical 10.0Aug 19Cisco Crosswork Planning: missing authenticationCVE-2026-20357no fix yetCritical 10.0Aug 19As part of Cisco's ongoing commitment to proactive security and product qualityCVE-2026-20358no fix yet