CVE-2026-20030
CriticalCVSS 10.0Summary
Vulnerability in Cisco Crosswork related to improper neutralization of special elements used in a SQL command (CWE-89), i.e., SQL injection. Discovered during internal security review, fixed in hardening release.
Risk Assessment
An attacker may inject malicious SQL code, potentially leading to unauthorized database access, data modification, or deletion.
Recommendation
Install the latest Cisco Crosswork version with security fixes.
Original NVD description (English source)
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Crosswork engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20030 are related to improper neutralization of special elements used in a SQL command issues that are grouped under the Common Weakness Enumeration (CWE) CWE-89.