Cisco Network Flaw Exposes Devices to Remote Denial-of

Gbhackers •Divya • May 7, 2026

Cisco has issued a high-severity security advisory detailing a critical connection exhaustion vulnerability affecting its network management software. Tracked as CVE-2026-20188, this flaw carries a CVSS base score of 7.5. It directly impacts both the Cisco Crosswork Network Controller (CNC) and the Cisco Network Services Orchestrator (NSO), potentially allowing threat actors to disrupt core network […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Cisco DoS Vulnerability CVE-2026-20188 Requires Manual Reboot for Recovery Cisco has disclosed a high-severity denial-of-service (DoS) vulnerability tracked as CVE-2026-20188 affecting the Crosswork Network Controller (CNC) and Network Services Orchestrator (NSO). The flaw arises from inadequate rate limiting on incoming connections, allowing unauthenticated remote attackers to exhaust connection resources, leading to system unresponsiveness. Affected systems require a manual reboot to recover from the DoS condition. Cisco has not reported any active exploitation of this vulnerability at this time. The vulnerability carries a CVSS base score of 7.5, indicating significant risk to network infrastructure. Cisco has advised customers to upgrade to patched software to mitigate the risk. This vulnerability follows a history of similar issues in Cisco products, which have previously been exploited in attacks. The advisory was published on May 6, 2026. 3 sources 58

Extracted Entities

Cisco Network Flaw Exposes Devices to Remote Denial-of

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CVEs (1)

CWE Weaknesses (1)