Cisco Security Advisoriescisco-sa-notice-LDquvx5d

Cisco Advance Notification for Publication of August 19, 2026, Security Advisories

On August 19, 2026, the Cisco Product Security Incident Response Team (PSIRT) published the following advisories: Cisco Security Advisory CVE ID Security Impact Rating CVSS Base Score Cisco Crosswork Security Hardening Release: August 2026 CVE-2026-20030CVE-2026-20357CVE-2026-20358CVE-2026-20359 Critical 10.0 Cisco Secure Workload Software Security Hardening Release: August 2026 CVE-2026-20231CVE-2026-20315CVE-2026-20317CVE-2026-20318CVE-2026-20319 Critical 10.0 Cisco BroadWorks Out-of-Band Blind XML External Entity Injection Vulnerability CVE-2026-20320 High 7.5 Cisco Unified Intelligence Center SQL Injection Vulnerability CVE-2026-20327 Medium 6.5 Cisco RoomOS Stack Overflow Vulnerability CVE-2026-20302 Medium 6.1 Cisco Industrial Ethernet 1000 Series Switches Stored Cross-Site Scripting Vulnerability CVE-2026-20232 Medium 5.4 Cisco Industrial Ethernet 1000 Series Switches Denial of Service Vulnerability CVE-2026-20177 Medium 5.3 Cisco Packaged Contact Center Enterprise and Cisco Unified Contact Center Enterprise Server-Side Request Forgery Vulnerability CVE-2026-20314 Medium 5.0 To fully remediate the vulnerabilities that were disclosed on August 19, 2026, Cisco strongly recommends that customers upgrade to the fixed software that is indicated in the advisories. For more information about changes in Cisco PSIRT vulnerability disclosure, see Strengthening the Foundation: A Predictable, Customer-Focused Response to AI-Accelerated Vulnerability Discovery. Security Impact Rating: Informational

Read the vendor bulletin

InformationalCVSS not listedInformational severity

Scope

What the vendor says is affected

The collected bulletin did not provide a separate affected-products list. Check the original bulletin before making an exposure decision.

Timeline

When this advisory changed

Aug 19, 2026 at 4:00 PM UTC
Published by Cisco
The publication date reported by the vendor.
Aug 20, 2026 at 2:20 AM UTC
Added to SecurityAlert
We collected the advisory from the official source.
Sep 9, 2026 at 3:50 PM UTC
Confirmed at the source
Our collector saw this advisory during a later source check.

Vulnerabilities

CVEs named in this advisory

CVE-2026-20320View CVSS, KEV, EPSS, and threat context CVE-2026-20327View CVSS, KEV, EPSS, and threat context CVE-2026-20302View CVSS, KEV, EPSS, and threat context CVE-2026-20232View CVSS, KEV, EPSS, and threat context CVE-2026-20177View CVSS, KEV, EPSS, and threat context CVE-2026-20314View CVSS, KEV, EPSS, and threat context

Source

Start with the vendor's bulletin

SecurityAlert organizes the fields the vendor published. The original bulletin remains the source of record for affected versions, fixes, and later changes.

Vendor: Cisco
Advisory ID: cisco-sa-notice-LDquvx5d
Last source check: Sep 13, 2026 at 4:50 AM UTC

Open the official bulletin How SecurityAlert builds this record

Your environment

Check the systems you actually run

A vendor advisory can tell you what may be affected. It cannot tell you whether that product and version are installed in your environment.

Confirm the product and installed version.
Read the vendor's prerequisites and exceptions.
Test the update or mitigation through your normal change process.

Keep following

Get new Cisco advisories

Use the vendor-specific RSS feed or set up alerts for a product your team relies on.

Follow this vendor's RSS feed

What the vendor says is affected

When this advisory changed

CVEs named in this advisory

Related advisories from Cisco

Cisco BroadWorks Out-of-Band Blind XML External Entity Injection Vulnerability

Cisco RoomOS Stack Overflow Vulnerability

Cisco Industrial Ethernet 1000 Series Switches Denial of Service Vulnerability

Cisco Unified Intelligence Center SQL Injection Vulnerability

Cisco Packaged Contact Center Enterprise and Cisco Unified Contact Center Enterprise Server-Side Request Forgery Vulnerability

Cisco Industrial Ethernet 1000 Series Switches Stored Cross-Site Scripting Vulnerability