CVE-2026-20358 is a critical vulnerability in Cisco Crosswork Planning involving external control of file name or path. It was discovered during an internal security review and relates to CWE-73, which concerns external control of file system resources. The vulnerability affects multiple specific versions of Cisco Crosswork Planning. The CVSS score is 10.0, indicating a critical severity with no required privileges or user interaction, and it impacts integrity and availability. No known exploits are reported in the wild. Cisco has released a software hardening update addressing these issues.
CVE-2026-20357 is a critical vulnerability in Cisco Crosswork Planning involving missing authentication for critical functions. This flaw allows unauthenticated remote attackers to potentially execute actions with high impact on confidentiality, integrity, and availability. The vulnerability affects multiple specific versions of Cisco Crosswork Planning. Cisco has acknowledged the issue as part of an internal security review and released a software hardening update addressing multiple vulnerabilities including this one.
CVE-2026-20302 is a buffer overflow vulnerability in the USB driver of Cisco RoomOS software. It allows an unauthenticated local attacker with physical access to the USB port to execute arbitrary code with root privileges by connecting a malicious USB device. The flaw arises from insufficient boundary checks on data provided through the USB driver.
A vulnerability in the web-based management interface of Cisco Industrial Ethernet (IE) 1000 Series Switches could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface.
This vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of an affected system. An attacker could exploit this vulnerability by injecting malicious code into specific pages of the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of another user. To exploit this vulnerability, the attacker must have valid user credentials on the affected system.
CVE-2026-20231 is a critical vulnerability in Cisco Secure Workload involving improper neutralization of special elements in output used by a downstream component, categorized under CWE-74. This vulnerability has a CVSS score of 9.9, indicating high severity with network attack vector, low attack complexity, and requiring low privileges but no user interaction. It impacts confidentiality, integrity, and availability with a complete scope change. Multiple specific versions of Cisco Secure Workload are affected.
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Crosswork engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.
The vulnerabilities tracked by CVE-2026-20030 are related to improper neutralization of special elements used in a SQL command issues that are grouped under the Common Weakness Enumeration (CWE) CWE-89.
CVE-2026-20177 is a medium severity vulnerability in Cisco Industrial Ethernet 1000 Series Switches. It involves insufficient protection against management plane flooding attacks, allowing an unauthenticated remote attacker to cause denial of service by overwhelming the device manager, SSH, or API. The vulnerability does not affect data traffic through the device. Multiple specific firmware versions are affected.
A vulnerability in the Remote Access SSL VPN service for Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition.
This vulnerability is due to insufficient error checking when processing HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to the Remote Access SSL VPN service on an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition.
A vulnerability in the XAR file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of memory corruption on an affected device.
This vulnerability is due to improper boundary checks for content in XAR files during scanning. An attacker could exploit this vulnerability by submitting a crafted file that contains XAR content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.
A vulnerability in the GPT file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of memory corruption on an affected device.
This vulnerability is due to improper handling of an endian conversion operation, which may result in an out-of-bounds buffer write. An attacker could exploit this vulnerability by submitting a crafted GPT file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.
A vulnerability in the PESpin file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of memory corruption on an affected device.
This vulnerability is due to improper boundary checks for content in PESpin files during scanning, which may result in an integer overflow. An attacker could exploit this vulnerability by submitting a crafted file that contains PESpin content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.
A vulnerability in the Mach-O file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of memory corruption on an affected device.
This vulnerability is due to improper boundary checks for content in Mach-O files during scanning, which may result in an out-of-bounds buffer read. An attacker could exploit this vulnerability by submitting a crafted Mach-O file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.
A vulnerability in the PDF file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of memory corruption on an affected device.
This vulnerability is due to improper boundary checks for content in PDF files during scanning, which may result in an out-of-bounds buffer read. An attacker could exploit this vulnerability by submitting a crafted PDF file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.
A vulnerability in the zip archive parser of ClamAV allows an unauthenticated remote attacker to cause a denial-of-service (DoS) condition by submitting a crafted zip file. The issue arises from improper memory handling leading to a double-free error during scanning, which terminates the ClamAV scanning process.