Cisco Patches Critical Crosswork, Secure Workload Vulnerabilities
Cisco patches 15 vulnerabilities, including critical flaws in Crosswork and Secure Workload.
Cisco has released patches for 15 vulnerabilities affecting its Crosswork and Secure Workload products, with several rated as critical. The flaws could allow for remote code execution, authentication bypasses, and path traversal attacks. Cisco is not aware of any active exploitation of these vulnerabilities in the wild.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Cisco?
Get an email when a new story names Cisco, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonCisco disclosed 15 vulnerabilities across its Crosswork and Secure Workload products, several of which are rated critical and could allow attackers to execute remote code, bypass authentication, or perform path traversal attacks. These types of flaws in network management and workload security platforms are particularly dangerous because they can serve as pivot points into broader infrastructure. While no active exploitation has been reported, the window between public disclosure and weaponization is often very short. Organizations running these products face significant risk if patches are not applied promptly, especially given that such platforms often hold privileged access to critical network resources.
What helps against this
How we list vendors- Vulnerability scanning and prioritisation
You know which systems are vulnerable, and which ones to fix first.
- Automated patch management
Known holes get closed in days, not months.
- Threat intelligence
Attack campaigns reach your sector, suppliers or software before your team hears about them.
Indicators of Compromise
Extracted by AI from the linked source. Not reviewed by an editor. How this works
- cve — CVE-2026-20030
- cve — CVE-2026-20357
- cve — CVE-2026-20358
- cve — CVE-2026-20359
- cve — CVE-2026-20315
- cve — CVE-2026-20317
- cve — CVE-2026-20231
- cve — CVE-2026-20318
- cve — CVE-2026-20319
- cve — CVE-2026-20320