[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fSwNz4f4Y1Lcplmy-CMcWX5zuEur1OsYmN7fPFI11vL0":3},{"lesson":4},{"id":5,"slug":6,"article_id":7,"title":8,"body":9,"prevention":10,"framework_refs":11,"framework_notes":23,"status":24,"created_at":25,"published_at":26,"article":27,"tags":31,"podcasts":50,"controls":51},"10a980e5-fef6-45fd-b30c-dbb657a684de","cisco-patches-critical-cvss-100-flaws-in-crosswork-and-secure-workload","cbda1645-1f42-4890-b183-d7d8b927636a","Cisco Patches Critical CVSS 10.0 Flaws in Crosswork and Secure Workload","Cisco disclosed nine vulnerabilities in its Crosswork and Secure Workload platforms, five of which received the maximum CVSS score of 10.0, including SQL injection and missing authentication flaws. These types of vulnerabilities represent fundamental security failures — missing authentication means attackers can access systems without any credentials, while SQL injection can expose or destroy entire databases. Although discovered internally and not yet exploited in the wild, CVSS 10.0 ratings indicate the highest possible risk and demand immediate remediation. The window between public disclosure and active exploitation is often very short, making rapid patching of enterprise network infrastructure absolutely critical.","**Immediate actions:**\n- Apply Cisco's latest security updates for Crosswork and Secure Workload platforms without delay.\n- Audit all Cisco deployments in your environment to confirm version currency and exposure.\n- Temporarily restrict network access to affected systems until patches are applied.\n\n**Long-term improvements:**\n- Implement an automated patch management process with SLA-driven timelines based on CVSS severity (e.g., CVSS 9.0+ patched within 24–72 hours).\n- Enforce authentication requirements on all internal and external APIs as part of your secure development and procurement standards.\n- Conduct regular vulnerability assessments and penetration testing against network management platforms.\n\n**Detection measures:**\n- Enable logging and alerting on authentication failures and anomalous SQL query patterns across all network management systems.\n- Subscribe to vendor security advisories (Cisco PSIRT) and integrate alerts into your vulnerability management workflow.\n- Use a SIEM to correlate access events against known CVEs for rapid detection of exploitation attempts.",[12,13,14,15,16,17,18,19,20,21,22],"CIS Control 7: Continuous Vulnerability Management","CIS Control 12: Network Infrastructure Management","CIS Control 6: Access Control Management","NIST SP 800-53 SI-2: Flaw Remediation","NIST SP 800-53 AC-3: Access Enforcement","NIST SP 800-53 RA-5: Vulnerability Monitoring and Scanning","NIST CSF ID.VM-1: Vulnerability Identification","NIST CSF RS.MI-3: Newly Identified Vulnerabilities Mitigated","ITIL: Change and Release Management","OWASP A03:2021 – Injection","OWASP A07:2021 – Identification and Authentication Failures",{},"published","2026-08-21T12:21:26.028618+00:00","2026-08-21T12:21:25.757+00:00",{"id":7,"url":28,"slug":29,"title":30},"https:\u002F\u002Fthehackernews.com\u002F2026\u002F08\u002Fcisco-patches-nine-crosswork-and-secure.html","cisco-patches-nine-crosswork-and-secure-workload-flaws-five-scoring-cvss-10-0-51c8d4","Cisco Patches Nine Crosswork and Secure Workload Flaws, Five Scoring CVSS 10.0",[32,38,44],{"id":33,"name":34,"slug":35,"description":36,"color":37},"05757c8d-6b93-4194-b35d-7359e7d33b0e","Vulnerability Management","vulnerability-management","Missing scans, no risk prioritization","#fb923c",{"id":39,"name":40,"slug":41,"description":42,"color":43},"1ec88fde-2d0f-4ed8-932a-33f5ccc0fdc7","Access Control","access-control","Excessive privileges, missing MFA, weak auth","#f97316",{"id":45,"name":46,"slug":47,"description":48,"color":49},"af7fce9e-1ce8-4156-93bc-09dcfbfdf29d","Patch Management","patch-management","Unpatched vulnerabilities, delayed updates","#ef4444",[],[52,55,58],{"slug":35,"name":53,"problem":54},"Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",{"slug":47,"name":56,"problem":57},"Automated patch management","Known holes get closed in days, not months.",{"slug":59,"name":60,"problem":61},"security-monitoring-siem","Security monitoring (SIEM)","Logs from everywhere end up in one place, with alerts that someone actually sees."]