Back to Feed
VulnerabilitiesAug 21, 2026

Cisco Patches Nine Crosswork and Secure Workload Flaws, Five Scoring CVSS 10.0

Cisco patches nine vulnerabilities in Crosswork and Secure Workload software, five with CVSS 10.0.

Cisco has released security updates for its Crosswork platforms and Secure Workload Software, addressing nine vulnerabilities. Five of these flaws, including SQL injection and missing authentication, received a critical CVSS score of 10.0. The company stated these vulnerabilities were found internally and are not known to be actively exploited, urging customers to update their systems.

AI summary of the linked source. Not reviewed by an editor. How this works

Vendor Watch

Run Cisco?

Get an email when a new story names Cisco, usually within the hour.

Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy

The lesson from this incident

Full lesson

Cisco disclosed nine vulnerabilities in its Crosswork and Secure Workload platforms, five of which received the maximum CVSS score of 10.0, including SQL injection and missing authentication flaws. These types of vulnerabilities represent fundamental security failures — missing authentication means attackers can access systems without any credentials, while SQL injection can expose or destroy entire databases. Although discovered internally and not yet exploited in the wild, CVSS 10.0 ratings indicate the highest possible risk and demand immediate remediation. The window between public disclosure and active exploitation is often very short, making rapid patching of enterprise network infrastructure absolutely critical.

What helps against this

How we list vendors

Indicators of Compromise

Extracted by AI from the linked source. Not reviewed by an editor. How this works

  • cve — CVE-2026-20030
  • cve — CVE-2026-20357
  • cve — CVE-2026-20358
  • cve — CVE-2026-20359
  • cve — CVE-2026-20231
  • cve — CVE-2026-20315
  • cve — CVE-2026-20317
  • cve — CVE-2026-20318
  • cve — CVE-2026-20319
  • cve — CVE-2026-20349

Entities

Cisco (vendor)Crosswork Data Gateway (product)Crosswork Network Controller (product)Crosswork Planning (product)Cisco Secure Workload (product)Cisco Secure Firewall Adaptive Security Appliance (product)