Cisco Crosswork Network Controller Server-Side Template Injection Vulnerability

Source: cisco / cisco-sa-cnc-inj-QNMeEmxk — original advisory

Published: 2026-06-17 · Last updated: 2026-06-17 · Vendor severity: Medium

CVEs

CVE	CVSS	CWE	Exploitation
CVE-2026-20220	6.3	CWE-74: Injection	Not observed in the wild

Product	Affected versions	Fixed version
Cisco Crosswork Network Change Automation	Not specified by vendor	Not specified by vendor