Forwarded Taiwan Computer Network Emergency Response Team/Coordination Center Information Security Alert TWCERTCC-200-202608-00000016

[Content Description]
The Cisco Crosswork development team discovered multiple security vulnerabilities during an internal security review and has completed remediation. Currently, there is no evidence that these vulnerabilities have been actively exploited. To help customers deploy security updates in a timely manner and simplify the vulnerability disclosure process, Cisco has publicly disclosed the relevant vulnerability information and remediation recommendations.

CVE-2026-20030(CVSS: 10.0) is an Improper Neutralization of Special Elements Used in an SQL Command vulnerability; CVE-2026-20357(CVSS: 10.0) is a Missing Authentication for Critical Function vulnerability; CVE-2026-20358(CVSS: 10.0) is an External Control of File Name or Path vulnerability; CVE-2026-20359(CVSS: 9.8) is an Insufficiently Protected Credentials vulnerability.

[Impacted Platform]
Cisco Crosswork version 7.2.1(inclusive) and earlier

[Recommended Actions]
Please update to Cisco Crosswork version 7.2.1-SP(inclusive) or later

[Reference]
1. https://www.twcert.org.tw/tw/cp-169-11114-d0482-1.html