Cisco Crosswork Network Controller and Cisco Network Services Orchestrator Connection...

7.5 / 10

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Description

A vulnerability in the connection-handling mechanism of Cisco Crosswork Network Controller (CNC) and Cisco Network Services Orchestrator (NSO) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected system.

This vulnerability is due to an inadequate implementation of rate-limiting on incoming network connections. An attacker could exploit this vulnerability by sending a large number of connection requests to an affected system. A successful exploit could allow the attacker to exhaust available connection resources, causing Cisco CNC and Cisco NSO to become unresponsive and resulting in a DoS condition for legitimate users and dependent services. A manual reboot of the system is required to recover from this condition.

Basic Information

ID CVE-2026-20188

Source cisco

Published May 6, 2026 at 16:15

Affected Product

Vendor Cisco

Product Cisco Crosswork Network Change Automation

Version 3.0.0

Affected Versions Cisco Cisco Crosswork Network Change Automation 3.0.0
Cisco Cisco Crosswork Network Change Automation 1.0.0
Cisco Cisco Crosswork Network Change Automation 2.0.2
Cisco Cisco Crosswork Network Change Automation 4.0.0
Cisco Cisco Crosswork Network Change Automation 4.1.0
Cisco Cisco Crosswork Network Change Automation 4.5.0
Cisco Cisco Crosswork Network Change Automation 5.0.0
Cisco Cisco Crosswork Network Change Automation 4.5.1
Cisco Cisco Crosswork Network Change Automation 4.5.2
Cisco Cisco Crosswork Network Change Automation 5.0.2
Cisco Cisco Crosswork Network Change Automation 4.1.3
Cisco Cisco Crosswork Network Change Automation 6.0.0
Cisco Cisco Crosswork Network Change Automation 7.0.0
Cisco Cisco Crosswork Network Change Automation 4.1.4
Cisco Cisco Crosswork Network Change Automation 5.0.4
Cisco Cisco Crosswork Network Change Automation 7.1.0
Cisco Cisco Crosswork Network Change Automation 7.0.3
Cisco Cisco Crosswork Network Change Automation 7.1.3
Cisco Cisco Network Services Orchestrator 5.7
Cisco Cisco Network Services Orchestrator 5.7.1
Cisco Cisco Network Services Orchestrator 5.7.1.1
Cisco Cisco Network Services Orchestrator 5.7.2
Cisco Cisco Network Services Orchestrator 5.7.2.1
Cisco Cisco Network Services Orchestrator 5.7.3
Cisco Cisco Network Services Orchestrator 5.8
Cisco Cisco Network Services Orchestrator 5.6.6.1
Cisco Cisco Network Services Orchestrator 5.7.5.1
Cisco Cisco Network Services Orchestrator 5.6.7.1
Cisco Cisco Network Services Orchestrator 5.6.7
Cisco Cisco Network Services Orchestrator 5.8.1
Cisco Cisco Network Services Orchestrator 5.6.6
Cisco Cisco Network Services Orchestrator 5.8.2.1
Cisco Cisco Network Services Orchestrator 5.7.5
Cisco Cisco Network Services Orchestrator 5.7.4
Cisco Cisco Network Services Orchestrator 5.8.2
Cisco Cisco Network Services Orchestrator 5.6.7.2
Cisco Cisco Network Services Orchestrator 5.7.6
Cisco Cisco Network Services Orchestrator 5.7.6.1
Cisco Cisco Network Services Orchestrator 5.8.3
Cisco Cisco Network Services Orchestrator 5.6.8
Cisco Cisco Network Services Orchestrator 5.7.6.2
Cisco Cisco Network Services Orchestrator 5.8.4
Cisco Cisco Network Services Orchestrator 5.7.7
Cisco Cisco Network Services Orchestrator 5.6.9
Cisco Cisco Network Services Orchestrator 5.6.8.1
Cisco Cisco Network Services Orchestrator 5.8.5
Cisco Cisco Network Services Orchestrator 5.7.8
Cisco Cisco Network Services Orchestrator 6.0
Cisco Cisco Network Services Orchestrator 5.7.8.1
Cisco Cisco Network Services Orchestrator 6.0.1
Cisco Cisco Network Services Orchestrator 5.6.10
Cisco Cisco Network Services Orchestrator 5.8.6
Cisco Cisco Network Services Orchestrator 6.0.1.1
Cisco Cisco Network Services Orchestrator 6.0.2
Cisco Cisco Network Services Orchestrator 5.7.9
Cisco Cisco Network Services Orchestrator 5.6.11
Cisco Cisco Network Services Orchestrator 5.8.7
Cisco Cisco Network Services Orchestrator 6.0.3
Cisco Cisco Network Services Orchestrator 5.7.10
Cisco Cisco Network Services Orchestrator 5.6.12
Cisco Cisco Network Services Orchestrator 5.8.8
Cisco Cisco Network Services Orchestrator 6.0.4
Cisco Cisco Network Services Orchestrator 5.7.10.1
Cisco Cisco Network Services Orchestrator 6.1
Cisco Cisco Network Services Orchestrator 5.7.6.3
Cisco Cisco Network Services Orchestrator 5.7.11
Cisco Cisco Network Services Orchestrator 6.0.5
Cisco Cisco Network Services Orchestrator 5.6.13
Cisco Cisco Network Services Orchestrator 5.8.9
Cisco Cisco Network Services Orchestrator 6.1.1
Cisco Cisco Network Services Orchestrator 5.7.10.2
Cisco Cisco Network Services Orchestrator 6.0.6
Cisco Cisco Network Services Orchestrator 5.7.12
Cisco Cisco Network Services Orchestrator 5.6.14
Cisco Cisco Network Services Orchestrator 5.8.10
Cisco Cisco Network Services Orchestrator 6.0.7
Cisco Cisco Network Services Orchestrator 5.7.13
Cisco Cisco Network Services Orchestrator 5.8.11
Cisco Cisco Network Services Orchestrator 6.0.8
Cisco Cisco Network Services Orchestrator 5.6.14.1
Cisco Cisco Network Services Orchestrator 5.8.12
Cisco Cisco Network Services Orchestrator 6.0.9
Cisco Cisco Network Services Orchestrator 5.8.13
Cisco Cisco Network Services Orchestrator 5.7.14
Cisco Cisco Network Services Orchestrator 6.0.10
Cisco Cisco Network Services Orchestrator 6.0.11
Cisco Cisco Network Services Orchestrator 5.7.15
Cisco Cisco Network Services Orchestrator 6.0.12
Cisco Cisco Network Services Orchestrator 5.7.9.1
Cisco Cisco Network Services Orchestrator 5.7.15.1
Cisco Cisco Network Services Orchestrator 6.0.13
Cisco Cisco Network Services Orchestrator 5.6.14.3
Cisco Cisco Network Services Orchestrator 5.8.13.1
Cisco Cisco Network Services Orchestrator 5.7.16
Cisco Cisco Network Services Orchestrator 5.7.17
Cisco Cisco Network Services Orchestrator 5.7.17.1
Cisco Cisco Network Services Orchestrator 5.7.18
Cisco Cisco Network Services Orchestrator 5.7.19
Cisco Cisco Network Services Orchestrator 5.7.19.1

References

sec.cloudapps.cisco.com /security/center/content/CiscoSecurityAdvisory/cisco-sa-nso-dos-7Egqyc

{
    "lastseen": "",
    "description": "A vulnerability in the connection-handling mechanism of Cisco Crosswork Network Controller (CNC) and Cisco Network Services Orchestrator (NSO) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected system.\r\n\r\nThis vulnerability is due to an inadequate implementation of rate-limiting on incoming network connections. An attacker could exploit this vulnerability by sending a large number of connection requests to an affected system. A successful exploit could allow the attacker to exhaust available connection resources, causing Cisco CNC and Cisco NSO to become unresponsive and resulting in a DoS condition for legitimate users and dependent services. A manual reboot of the system is required to recover from this condition.",
    "published": "2026-05-06T16:15:37.396Z",
    "modified": "2026-05-06T16:15:37.396Z",
    "type": "cve",
    "title": "Cisco Crosswork Network Controller and Cisco Network Services Orchestrator Connection Exhaustion Denial of Service Vulnerability",
    "source": "cisco",
    "references": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nso-dos-7Egqyc",
    "id": "CVE-2026-20188",
    "bulletinFamily": "",
    "cwe": null,
    "cvelist": null,
    "sourceData": "Cisco Cisco Crosswork Network Change Automation 3.0.0\nCisco Cisco Crosswork Network Change Automation 1.0.0\nCisco Cisco Crosswork Network Change Automation 2.0.2\nCisco Cisco Crosswork Network Change Automation 4.0.0\nCisco Cisco Crosswork Network Change Automation 4.1.0\nCisco Cisco Crosswork Network Change Automation 4.5.0\nCisco Cisco Crosswork Network Change Automation 5.0.0\nCisco Cisco Crosswork Network Change Automation 4.5.1\nCisco Cisco Crosswork Network Change Automation 4.5.2\nCisco Cisco Crosswork Network Change Automation 5.0.2\nCisco Cisco Crosswork Network Change Automation 4.1.3\nCisco Cisco Crosswork Network Change Automation 6.0.0\nCisco Cisco Crosswork Network Change Automation 7.0.0\nCisco Cisco Crosswork Network Change Automation 4.1.4\nCisco Cisco Crosswork Network Change Automation 5.0.4\nCisco Cisco Crosswork Network Change Automation 7.1.0\nCisco Cisco Crosswork Network Change Automation 7.0.3\nCisco Cisco Crosswork Network Change Automation 7.1.3\nCisco Cisco Network Services Orchestrator 5.7\nCisco Cisco Network Services Orchestrator 5.7.1\nCisco Cisco Network Services Orchestrator 5.7.1.1\nCisco Cisco Network Services Orchestrator 5.7.2\nCisco Cisco Network Services Orchestrator 5.7.2.1\nCisco Cisco Network Services Orchestrator 5.7.3\nCisco Cisco Network Services Orchestrator 5.8\nCisco Cisco Network Services Orchestrator 5.6.6.1\nCisco Cisco Network Services Orchestrator 5.7.5.1\nCisco Cisco Network Services Orchestrator 5.6.7.1\nCisco Cisco Network Services Orchestrator 5.6.7\nCisco Cisco Network Services Orchestrator 5.8.1\nCisco Cisco Network Services Orchestrator 5.6.6\nCisco Cisco Network Services Orchestrator 5.8.2.1\nCisco Cisco Network Services Orchestrator 5.7.5\nCisco Cisco Network Services Orchestrator 5.7.4\nCisco Cisco Network Services Orchestrator 5.8.2\nCisco Cisco Network Services Orchestrator 5.6.7.2\nCisco Cisco Network Services Orchestrator 5.7.6\nCisco Cisco Network Services Orchestrator 5.7.6.1\nCisco Cisco Network Services Orchestrator 5.8.3\nCisco Cisco Network Services Orchestrator 5.6.8\nCisco Cisco Network Services Orchestrator 5.7.6.2\nCisco Cisco Network Services Orchestrator 5.8.4\nCisco Cisco Network Services Orchestrator 5.7.7\nCisco Cisco Network Services Orchestrator 5.6.9\nCisco Cisco Network Services Orchestrator 5.6.8.1\nCisco Cisco Network Services Orchestrator 5.8.5\nCisco Cisco Network Services Orchestrator 5.7.8\nCisco Cisco Network Services Orchestrator 6.0\nCisco Cisco Network Services Orchestrator 5.7.8.1\nCisco Cisco Network Services Orchestrator 6.0.1\nCisco Cisco Network Services Orchestrator 5.6.10\nCisco Cisco Network Services Orchestrator 5.8.6\nCisco Cisco Network Services Orchestrator 6.0.1.1\nCisco Cisco Network Services Orchestrator 6.0.2\nCisco Cisco Network Services Orchestrator 5.7.9\nCisco Cisco Network Services Orchestrator 5.6.11\nCisco Cisco Network Services Orchestrator 5.8.7\nCisco Cisco Network Services Orchestrator 6.0.3\nCisco Cisco Network Services Orchestrator 5.7.10\nCisco Cisco Network Services Orchestrator 5.6.12\nCisco Cisco Network Services Orchestrator 5.8.8\nCisco Cisco Network Services Orchestrator 6.0.4\nCisco Cisco Network Services Orchestrator 5.7.10.1\nCisco Cisco Network Services Orchestrator 6.1\nCisco Cisco Network Services Orchestrator 5.7.6.3\nCisco Cisco Network Services Orchestrator 5.7.11\nCisco Cisco Network Services Orchestrator 6.0.5\nCisco Cisco Network Services Orchestrator 5.6.13\nCisco Cisco Network Services Orchestrator 5.8.9\nCisco Cisco Network Services Orchestrator 6.1.1\nCisco Cisco Network Services Orchestrator 5.7.10.2\nCisco Cisco Network Services Orchestrator 6.0.6\nCisco Cisco Network Services Orchestrator 5.7.12\nCisco Cisco Network Services Orchestrator 5.6.14\nCisco Cisco Network Services Orchestrator 5.8.10\nCisco Cisco Network Services Orchestrator 6.0.7\nCisco Cisco Network Services Orchestrator 5.7.13\nCisco Cisco Network Services Orchestrator 5.8.11\nCisco Cisco Network Services Orchestrator 6.0.8\nCisco Cisco Network Services Orchestrator 5.6.14.1\nCisco Cisco Network Services Orchestrator 5.8.12\nCisco Cisco Network Services Orchestrator 6.0.9\nCisco Cisco Network Services Orchestrator 5.8.13\nCisco Cisco Network Services Orchestrator 5.7.14\nCisco Cisco Network Services Orchestrator 6.0.10\nCisco Cisco Network Services Orchestrator 6.0.11\nCisco Cisco Network Services Orchestrator 5.7.15\nCisco Cisco Network Services Orchestrator 6.0.12\nCisco Cisco Network Services Orchestrator 5.7.9.1\nCisco Cisco Network Services Orchestrator 5.7.15.1\nCisco Cisco Network Services Orchestrator 6.0.13\nCisco Cisco Network Services Orchestrator 5.6.14.3\nCisco Cisco Network Services Orchestrator 5.8.13.1\nCisco Cisco Network Services Orchestrator 5.7.16\nCisco Cisco Network Services Orchestrator 5.7.17\nCisco Cisco Network Services Orchestrator 5.7.17.1\nCisco Cisco Network Services Orchestrator 5.7.18\nCisco Cisco Network Services Orchestrator 5.7.19\nCisco Cisco Network Services Orchestrator 5.7.19.1",
    "sourceHref": "",
    "cvss": {
        "score": 7.5,
        "severity": "HIGH",
        "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
        "version": "3.1"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "Cisco Crosswork Network Change Automation",
    "version": "3.0.0",
    "vendor": "Cisco",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}

Cisco Crosswork Network Controller and Cisco Network Services Orchestrator Connection Exhaustion Denial of Service Vulnerability_CVE-2026-20188

Description

Basic Information

Affected Product

References

💭 Join the Security Discussion ❌ Cancel Reply