CVE-2026-20188

{
  "id": "CVE-2026-20188",
  "sourceIdentifier": "[email protected]",
  "published": "2026-05-06T17:16:21.190",
  "lastModified": "2026-10-26T19:10:00.163",
  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Following the initial publication of the Security Advisory about a denial of service (DoS) condition in Cisco Crosswork Network Controller and Cisco Network Services Orchestrator (NSO), additional information has been made available to the Cisco Product Security Incident Response Team (PSIRT).\r\n\r\nUpon further analysis, the Cisco PSIRT has reclassified this issue as a customer-configurable, resource management issue rather than a security vulnerability."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad en el mecanismo de gestión de conexiones de Cisco Crosswork Network Controller (CNC) y Cisco Network Services Orchestrator (NSO) podría permitir a un atacante remoto no autenticado causar una condición de denegación de servicio (DoS) en un sistema afectado.\n\nEsta vulnerabilidad se debe a una implementación inadecuada de la limitación de velocidad en las conexiones de red entrantes. Un atacante podría explotar esta vulnerabilidad enviando un gran número de solicitudes de conexión a un sistema afectado. Un exploit exitoso podría permitir al atacante agotar los recursos de conexión disponibles, haciendo que Cisco CNC y Cisco NSO dejen de responder y resultando en una condición de DoS para usuarios legítimos y servicios dependientes. Un reinicio manual del sistema es necesario para recuperarse de esta condición."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "Cisco",
          "product": "Cisco Crosswork Network Change Automation",
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N",
          "baseScore": 0.0,
          "baseSeverity": "NONE",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 0.0
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-05-06T17:46:35.111544Z",
          "id": "CVE-2026-20188",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-400"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nso-dos-7Egqyc",
      "source": "[email protected]"
    }
  ]
}