Vulnerability in Cisco Crosswork Network Change Automation
CVE-2026-20220
A vulnerability in the web-based management interface of Cisco Crosswork Network Controller could allow an authenticated, remote attacker to execute arbitrary commands on an affected device. This vulnerability is due to insufficient input validation in the configuration template engine of the web-based management interface. An attacker could exploit this vulnerability by sending a crafted request to the affected device. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system in limited areas of the file system. This vulnerability affects only areas of the operating system for which the template user has write permissions. To exploit this vulnerability, the attacker must have valid template user credentials with write permissions. Template users with read permissions cannot exploit this vulnerability.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 6.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L.
EPSS exploit prediction
EPSS: 0.003 (15.1th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 15th percentile — 15.1% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.003 · newest: 0.003 · change: 0.000
Affected products
- Cisco Crosswork Network Change Automation — versions 3.0.0, 3.0.1, 1.0.0
- Cisco Crosswork Network Controller — versions 7.2.0
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2026-20220?
- CVE-2026-20220 is a medium-severity vulnerability in Cisco Crosswork Network Change Automation, classified under Improper Neutralization of Special Elements in Output Used by a Downstream Component (Injection). CVSS score: 6.3/10. Published 2026-06-17.
- How severe is CVE-2026-20220?
- Medium severity. CVSS v3 base score is 6.3 out of 10.