Six Maximum
Cisco patched nine critical flaws, six rated CVSS 10.0, in Crosswork platforms and Secure Workload, none known to be exploited.
Cisco released fixes for nine critical vulnerabilities in its Crosswork platforms and Secure Workload software, discovered during an internal security review that used advanced AI models. Six flaws carry CVSS 10.0 ratings, including SQL injection CVE-2026-20030 and missing authentication CVE-2026-20357 in Crosswork, and access control CVE-2026-20315 and authentication flaws CVE-2026-20317 in Secure Workload. Fixes shipped in Crosswork 7.2.1-SP, Secure Workload 3.10.9.1, and 4.0.4.16. Cisco says no exploitation has been observed.
- Nine critical flaws patched across Crosswork and Secure Workload
- Six flaws rated maximum CVSS 10.0, including SQL injection
- Discovered via internal testing, reportedly using advanced AI models
- No known exploitation; fixed in 7.2.1-SP, 3.10.9.1, and 4.0.4.16
- CVEs
- CVE-2026-20030CVE-2026-20357CVE-2026-20358CVE-2026-20359CVE-2026-20231CVE-2026-20315CVE-2026-20317CVE-2026-20318CVE-2026-20319
- Vendors
- Cisco
- Products
- CrossworkSecure Workload
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2026-20357+3 related CVEs | Missing Authentication for Critical Functions in Cisco Crosswork | 10.0 group max | <1% | ||
CVE-2026-20315+2 related CVEs | Unauthenticated Improper Access Control in Cisco Secure Workload | 10.0 group max | <1% | ||
CVE-2026-20317+1 related CVE | Improper Authentication Flaws in Cisco Secure Workload Score CVSS 10.0 | 10.0 group max | <1% |
From the original article
3 min read at securityaffairs.com
Cisco patched nine critical flaws, including six rated CVSS 10. 0, found during internal testing. None are known to be exploited.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.