Summary
On August 19, 2026, the Cisco Product Security Incident Response Team (PSIRT) published the following advisories:
Products covered
A separate affected-products list was not included in the collected bulletin.
Published advisories
To fully remediate the vulnerabilities that were disclosed on August 19, 2026, Cisco strongly recommends that customers upgrade to the fixed software that is indicated in the advisories.
For more information about changes in Cisco PSIRT vulnerability disclosure, see Strengthening the Foundation: A Predictable, Customer-Focused Response to AI-Accelerated Vulnerability Discovery.
-
Cisco Crosswork Security Hardening Release: August 2026
-
Cisco Secure Workload Software Security Hardening Release: August 2026
-
Cisco BroadWorks Out-of-Band Blind XML External Entity Injection Vulnerability
-
Cisco Unified Intelligence Center SQL Injection Vulnerability
-
Cisco RoomOS Stack Overflow Vulnerability
-
Cisco Industrial Ethernet 1000 Series Switches Stored Cross-Site Scripting Vulnerability
-
Cisco Industrial Ethernet 1000 Series Switches Denial of Service Vulnerability
-
Cisco Packaged Contact Center Enterprise and Cisco Unified Contact Center Enterprise Server-Side Request Forgery Vulnerability
Remediation
To fully remediate the vulnerabilities that were disclosed on August 19, 2026, Cisco strongly recommends that customers upgrade to the fixed software that is indicated in the advisories.
CVEs in this advisory 15
What changed in later vendor updates
SecurityAlert records field-level changes from the point we begin following a bulletin. Earlier vendor changes may not have a field-by-field record.
- The vendor changed the advisory summary.
- Added CVEs: CVE-2026-20030, CVE-2026-20231, CVE-2026-20315, CVE-2026-20317, CVE-2026-20318.
- Added affected products: Published advisories.
- Removed affected products: Cisco Advance Notification for Publication of August 19, 2026, Security Advisories.
Updates
- Published by Cisco
The publication date reported by the vendor.
- Added to SecurityAlert
We collected the advisory from the official source.
- Confirmed at the source
Our collector saw this advisory during a later source check.