Cisco Patches Nine Crosswork and Secure Workload Flaws, Five Scoring CVSS 10.0
Cisco patches nine vulnerabilities in Crosswork and Secure Workload software, five with CVSS 10.0.
Cisco has released security updates for its Crosswork platforms and Secure Workload Software, addressing nine vulnerabilities. Five of these flaws, including SQL injection and missing authentication, received a critical CVSS score of 10.0. The company stated these vulnerabilities were found internally and are not known to be actively exploited, urging customers to update their systems.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Cisco?
Get an email when a new story names Cisco, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonCisco disclosed nine vulnerabilities in its Crosswork and Secure Workload platforms, five of which received the maximum CVSS score of 10.0, including SQL injection and missing authentication flaws. These types of vulnerabilities represent fundamental security failures — missing authentication means attackers can access systems without any credentials, while SQL injection can expose or destroy entire databases. Although discovered internally and not yet exploited in the wild, CVSS 10.0 ratings indicate the highest possible risk and demand immediate remediation. The window between public disclosure and active exploitation is often very short, making rapid patching of enterprise network infrastructure absolutely critical.
What helps against this
How we list vendors- Vulnerability scanning and prioritisation
You know which systems are vulnerable, and which ones to fix first.
- Automated patch management
Known holes get closed in days, not months.
- Security monitoring (SIEM)
Logs from everywhere end up in one place, with alerts that someone actually sees.
Indicators of Compromise
Extracted by AI from the linked source. Not reviewed by an editor. How this works
- cve — CVE-2026-20030
- cve — CVE-2026-20357
- cve — CVE-2026-20358
- cve — CVE-2026-20359
- cve — CVE-2026-20231
- cve — CVE-2026-20315
- cve — CVE-2026-20317
- cve — CVE-2026-20318
- cve — CVE-2026-20319
- cve — CVE-2026-20349