Back to vendor advisories
Cisco Security Advisoriescisco-sa-notice-LDquvx5d

Cisco Advance Notification for Publication of August 19, 2026, Security Advisories

15 CVEs Published Aug 19, 2026 at 4:00 PM UTC

8 advisories 15 CVEs 1 product group

Summary

On August 19, 2026, the Cisco Product Security Incident Response Team (PSIRT) published the following advisories:

Products covered

A separate affected-products list was not included in the collected bulletin.

8 advisories

Published advisories

To fully remediate the vulnerabilities that were disclosed on August 19, 2026, Cisco strongly recommends that customers upgrade to the fixed software that is indicated in the advisories.

For more information about changes in Cisco PSIRT vulnerability disclosure, see Strengthening the Foundation: A Predictable, Customer-Focused Response to AI-Accelerated Vulnerability Discovery.

  1. Cisco Crosswork Security Hardening Release: August 2026

    CriticalCVSS 10.0
  2. Cisco Secure Workload Software Security Hardening Release: August 2026

    CriticalCVSS 10.0
  3. Cisco BroadWorks Out-of-Band Blind XML External Entity Injection Vulnerability

    HighCVSS 7.5
  4. Cisco Unified Intelligence Center SQL Injection Vulnerability

    MediumCVSS 6.5
  5. Cisco RoomOS Stack Overflow Vulnerability

    MediumCVSS 6.1
  6. Cisco Industrial Ethernet 1000 Series Switches Stored Cross-Site Scripting Vulnerability

    MediumCVSS 5.4
  7. Cisco Industrial Ethernet 1000 Series Switches Denial of Service Vulnerability

    MediumCVSS 5.3
  8. Cisco Packaged Contact Center Enterprise and Cisco Unified Contact Center Enterprise Server-Side Request Forgery Vulnerability

    MediumCVSS 5.0

Remediation

To fully remediate the vulnerabilities that were disclosed on August 19, 2026, Cisco strongly recommends that customers upgrade to the fixed software that is indicated in the advisories.

CVEs in this advisory 15

Update history

What changed in later vendor updates

SecurityAlert records field-level changes from the point we begin following a bulletin. Earlier vendor changes may not have a field-by-field record.

    • The vendor changed the advisory summary.
    • Added CVEs: CVE-2026-20030, CVE-2026-20231, CVE-2026-20315, CVE-2026-20317, CVE-2026-20318.
    • Added affected products: Published advisories.
    • Removed affected products: Cisco Advance Notification for Publication of August 19, 2026, Security Advisories.

Updates

  1. Published by Cisco

    The publication date reported by the vendor.

  2. Added to SecurityAlert

    We collected the advisory from the official source.

  3. Confirmed at the source

    Our collector saw this advisory during a later source check.