Ce mail provient de l'extérieur, restons vigilants ===================================================================== CERT-Renater Note d'Information No. 2026/VULN855 _____________________________________________________________________ DATE : 20/08/2026 HARDWARE PLATFORM(S): / OPERATING SYSTEM(S): Systems running Cisco products. ===================================================================== https://sec.cloudapps.cisco.com/security/center/publicationListing.x _____________________________________________________________________ Below is the list of Cisco Security Advisories published by Cisco PSIRT on 2026-August-19. The following PSIRT security advisories (2 Critical, 1 High, 5 Medium) were published at 16:00 UTC today. Table of Contents: 1) Cisco Crosswork Security Hardening Release: August 2026 - SIR: Critical 2) Cisco Secure Workload Software Security Hardening Release: August 2026 - SIR: Critical 3) Cisco BroadWorks Out-of-Band Blind XML External Entity Injection Vulnerability - SIR: High 4) Cisco Unified Intelligence Center SQL Injection Vulnerability - SIR: Medium 5) Cisco RoomOS Stack Overflow Vulnerability - SIR: Medium 6) Cisco Packaged Contact Center Enterprise and Cisco Unified Contact Center Enterprise Server-Side Request Forgery Vulnerability - SIR: Medium 7) Cisco Industrial Ethernet 1000 Series Switches Stored Cross-Site Scripting Vulnerability - SIR: Medium 8) Cisco Industrial Ethernet 1000 Series Switches Denial of Service Vulnerability - SIR: Medium +-------------------------------------------------------------------- 1) Cisco Crosswork Security Hardening Release: August 2026 CVE-2026-20030, CVE-2026-20357, CVE-2026-20358, CVE-2026-20359 SIR: Critical CVSS Score v(3.1): 10.0 URL: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-crosswork-UzDTU9Vh ["https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-crosswork-UzDTU9Vh"] +-------------------------------------------------------------------- 2) Cisco Secure Workload Software Security Hardening Release: August 2026 CVE-2026-20231, CVE-2026-20315, CVE-2026-20317, CVE-2026-20318, CVE-2026-20319 SIR: Critical CVSS Score v(3.1): 10.0 URL: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-csw1-shSvndWP ["https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-csw1-shSvndWP"] +-------------------------------------------------------------------- 3) Cisco BroadWorks Out-of-Band Blind XML External Entity Injection Vulnerability CVE-2026-20320 SIR: High CVSS Score v(3.1): 7.5 URL: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-bworks-xxe-uwUd7CEt ["https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-bworks-xxe-uwUd7CEt"] +-------------------------------------------------------------------- 4) Cisco Unified Intelligence Center SQL Injection Vulnerability CVE-2026-20327 SIR: Medium CVSS Score v(3.1): 6.5 URL: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cuic-sql-inject-2qbfWSm5 ["https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cuic-sql-inject-2qbfWSm5"] +-------------------------------------------------------------------- 5) Cisco RoomOS Stack Overflow Vulnerability CVE-2026-20302 SIR: Medium CVSS Score v(3.1): 6.1 URL: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-roomos-bof-vTMANZgu ["https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-roomos-bof-vTMANZgu"] +-------------------------------------------------------------------- 6) Cisco Packaged Contact Center Enterprise and Cisco Unified Contact Center Enterprise Server-Side Request Forgery Vulnerability CVE-2026-20314 SIR: Medium CVSS Score v(3.1): 5.0 URL: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucce-pcce-ssrf-TghHxD ["https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucce-pcce-ssrf-TghHxD"] +-------------------------------------------------------------------- 7) Cisco Industrial Ethernet 1000 Series Switches Stored Cross-Site Scripting Vulnerability CVE-2026-20232 SIR: Medium CVSS Score v(3.1): 5.4 URL: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ie1k-NgXUFF52 ["https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ie1k-NgXUFF52"] +-------------------------------------------------------------------- 8) Cisco Industrial Ethernet 1000 Series Switches Denial of Service Vulnerability CVE-2026-20177 SIR: Medium CVSS Score v(3.1): 5.3 URL: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ie1k-uxq86Lnx ["https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ie1k-uxq86Lnx"] For additional information on Cisco's vulnerability management, disclosure cadence, and software patching strategy, see Cisco's Transition to a Risk-Based Vulnerability Disclosure Model: https://sec.cloudapps.cisco.com/security/center/resources/risk-based-disclosure ========================================================= + CERT-RENATER | tel : 01-53-94-20-44 + + 23/25 Rue Daviel | fax : 01-53-94-20-41 + + 75013 Paris | email:cert@support.renater.fr + =========================================================