[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fKmb2EVzbVSEjnUkSGC_xI6lT29-57um_37F9WcnsQsg":3},{"article":4,"iocs":39,"watch_terms":71,"solutions":72,"lesson":168},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":31,"category":32,"article_tags":36},"cbda1645-1f42-4890-b183-d7d8b927636a","Cisco Patches Nine Crosswork and Secure Workload Flaws, Five Scoring CVSS 10.0","cisco-patches-nine-crosswork-and-secure-workload-flaws-five-scoring-cvss-10-0-51c8d4","Cisco has published another round of security updates for Crosswork platforms and Secure Workload Software as part of a continued comprehensive internal security review. Four of the security vulnerabilities affect Crosswork Data Gateway, Crosswork Network Controller, and Crosswork Planning, regardless of the device configuration. A brief description of each of the flaws is below -","Cisco has released security updates for its Crosswork platforms and Secure Workload Software, addressing nine vulnerabilities. Five of these flaws, including SQL injection and missing authentication, received a critical CVSS score of 10.0. The company stated these vulnerabilities were found internally and are not known to be actively exploited, urging customers to update their systems.","Cisco patches nine vulnerabilities in Crosswork and Secure Workload software, five with CVSS 10.0.","https:\u002F\u002Fthehackernews.com\u002F2026\u002F08\u002Fcisco-patches-nine-crosswork-and-secure.html","https:\u002F\u002Fblogger.googleusercontent.com\u002Fimg\u002Fb\u002FR29vZ2xl\u002FAVvXsEis5Ujhq79PHPVr7VjuOjS0fOAyYm0aDTCJi9c5ieu-uya3FUM4Dh58yAT5U5J3VaXaGfNb4XowkyJ1lj3UTy8bOoF-u0O-5qdl-O7leomQjQw5jAI3m8WpZvC3se70f8mRP_KKIcScS0Nf9wJcsq4TWgiS_li3K6CSUbbG643IMhZBVGzW5XflwAbz0d1M\u002Fs1600\u002Fcisco.jpg","2026-08-21T10:03:11+00:00","2026-08-21T12:00:15.935176+00:00",8,[17,20,23,25,27,29],{"name":18,"type":19},"Cisco","vendor",{"name":21,"type":22},"Crosswork Data Gateway","product",{"name":24,"type":22},"Crosswork Network Controller",{"name":26,"type":22},"Crosswork Planning",{"name":28,"type":22},"Cisco Secure Workload",{"name":30,"type":22},"Cisco Secure Firewall Adaptive Security Appliance","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":31,"icon":33,"name":34,"slug":35},null,"Vulnerabilities","vulnerabilities",[37],{"category":38},{"id":31,"icon":33,"name":34,"slug":35},[40,44,47,50,53,56,59,62,65,68],{"type":41,"value":42,"context":43},"cve","CVE-2026-20030","SQL injection vulnerability in Cisco Crosswork",{"type":41,"value":45,"context":46},"CVE-2026-20357","Missing authentication for critical function vulnerability in Cisco Crosswork",{"type":41,"value":48,"context":49},"CVE-2026-20358","External control of file system vulnerability in Cisco Crosswork",{"type":41,"value":51,"context":52},"CVE-2026-20359","Insufficiently protected credentials vulnerability in Cisco Crosswork",{"type":41,"value":54,"context":55},"CVE-2026-20231","Improper neutralization of special elements vulnerabilities in Cisco Secure Workload",{"type":41,"value":57,"context":58},"CVE-2026-20315","Improper access control vulnerabilities in Cisco Secure Workload",{"type":41,"value":60,"context":61},"CVE-2026-20317","Improper authentication vulnerabilities in Cisco Secure Workload",{"type":41,"value":63,"context":64},"CVE-2026-20318","Improper input validation vulnerabilities in Cisco Secure Workload",{"type":41,"value":66,"context":67},"CVE-2026-20319","Improper restriction of operations within the bounds of a memory buffer vulnerabilities in Cisco Secure Workload",{"type":41,"value":69,"context":70},"CVE-2026-20349","Vulnerability in Cisco Secure Firewall ASA and FTD Software",[18,21,24],{"controls":73,"vendors":161},[74,103,132],{"slug":75,"name":76,"problem":77,"products":78},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[79,87,95],{"vendor_slug":80,"vendor_name":81,"vendor_logo":82,"product_slug":83,"product_name":84,"url":85,"description":86},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","vmdr","Qualys VMDR","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fvulnerability-management-detection-response\u002F","Vulnerability management, detection and response with risk-based prioritisation.",{"vendor_slug":88,"vendor_name":89,"vendor_logo":90,"product_slug":91,"product_name":92,"url":93,"description":94},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"vendor_slug":96,"vendor_name":97,"vendor_logo":98,"product_slug":99,"product_name":100,"url":101,"description":102},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"slug":104,"name":105,"problem":106,"products":107},"patch-management","Automated patch management","Known holes get closed in days, not months.",[108,116,124],{"vendor_slug":109,"vendor_name":110,"vendor_logo":111,"product_slug":112,"product_name":113,"url":114,"description":115},"manageengine","ManageEngine","\u002Fvendor-logos\u002Fmanageengine.png","patch-manager-plus","ManageEngine Patch Manager Plus","https:\u002F\u002Fwww.manageengine.com\u002Fpatch-management\u002F","Patch management for operating systems and third-party applications, on premises or in the cloud.",{"vendor_slug":117,"vendor_name":118,"vendor_logo":119,"product_slug":120,"product_name":121,"url":122,"description":123},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","intune","Microsoft Intune","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fmicrosoft-intune","Device management for Windows, macOS, iOS and Android, including update rings and compliance policies.",{"vendor_slug":125,"vendor_name":126,"vendor_logo":127,"product_slug":128,"product_name":129,"url":130,"description":131},"ivanti","Ivanti","\u002Fvendor-logos\u002Fivanti.png","neurons-patch-management","Ivanti Neurons for Patch Management","https:\u002F\u002Fwww.ivanti.com\u002Fproducts\u002Fivanti-neurons-for-patch-management","Risk-based patch management for operating systems and third-party applications.",{"slug":133,"name":134,"problem":135,"products":136},"security-monitoring-siem","Security monitoring (SIEM)","Logs from everywhere end up in one place, with alerts that someone actually sees.",[137,145,153],{"vendor_slug":138,"vendor_name":139,"vendor_logo":140,"product_slug":141,"product_name":142,"url":143,"description":144},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","cortex-xsiam","Cortex XSIAM","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fcortex\u002Fcortex-xsiam","AI-driven security operations platform that centralises security data, detection, automation and response for the SOC.",{"vendor_slug":146,"vendor_name":147,"vendor_logo":148,"product_slug":149,"product_name":150,"url":151,"description":152},"guardsix","Guardsix","\u002Fvendor-logos\u002Fguardsix.png","guardsix-siem","Guardsix SIEM","https:\u002F\u002Fguardsix.com\u002Fproduct\u002Fsiem","SIEM with automation, developed and hosted in Europe.",{"vendor_slug":154,"vendor_name":155,"vendor_logo":156,"product_slug":157,"product_name":158,"url":159,"description":160},"elastic","Elastic","\u002Fvendor-logos\u002Felastic.png","elastic-security","Elastic Security","https:\u002F\u002Fwww.elastic.co\u002Fsecurity","SIEM and endpoint security built on Elasticsearch, with open detection rules.",[162],{"slug":163,"name":18,"logo_path":164,"roles":165},"cisco","\u002Fvendor-logos\u002Fcisco.png",[166,167],"affected","reported_by",{"slug":169,"title":170,"body":171,"framework_refs":172,"framework_notes":184},"cisco-patches-critical-cvss-100-flaws-in-crosswork-and-secure-workload","Cisco Patches Critical CVSS 10.0 Flaws in Crosswork and Secure Workload","Cisco disclosed nine vulnerabilities in its Crosswork and Secure Workload platforms, five of which received the maximum CVSS score of 10.0, including SQL injection and missing authentication flaws. These types of vulnerabilities represent fundamental security failures — missing authentication means attackers can access systems without any credentials, while SQL injection can expose or destroy entire databases. Although discovered internally and not yet exploited in the wild, CVSS 10.0 ratings indicate the highest possible risk and demand immediate remediation. The window between public disclosure and active exploitation is often very short, making rapid patching of enterprise network infrastructure absolutely critical.",[173,174,175,176,177,178,179,180,181,182,183],"CIS Control 7: Continuous Vulnerability Management","CIS Control 12: Network Infrastructure Management","CIS Control 6: Access Control Management","NIST SP 800-53 SI-2: Flaw Remediation","NIST SP 800-53 AC-3: Access Enforcement","NIST SP 800-53 RA-5: Vulnerability Monitoring and Scanning","NIST CSF ID.VM-1: Vulnerability Identification","NIST CSF RS.MI-3: Newly Identified Vulnerabilities Mitigated","ITIL: Change and Release Management","OWASP A03:2021 – Injection","OWASP A07:2021 – Identification and Authentication Failures",{}]