Cisco Patches Nine Crosswork and Secure Workload Flaws, Five Scoring CVSS 10.0
Summary: Cisco released security updates for Crosswork platforms and Secure Workload Software, patching nine flaws, five of which score CVSS 10.0, found during an internal security review. Four of the vulnerabilities affect Crosswork Data Gateway, Crosswork Network Controller, and Crosswork Planning regardless of device configuration, affecting Release 7.2.1 and earlier and fixed in 7.2.1-SP, while the five Secure Workload flaws cover SaaS and on-premises deployments; Cisco said none are known to be actively exploited.
Why it matters: Five flaws at CVSS 10.0 in software Cisco says was never exploited in the wild still sit in the same product line that, two weeks earlier, produced 12 more internally found bugs - and Cisco's gear is prevalent enough in enterprise networks that attackers have repeatedly exploited dozens of its flaws to gain access and deploy malware.
Read the original at The Hacker News ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2026-20349
- Related
- CVE-2026-20349: Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability Known Exploited Vulnerabilities · Aug 11, 2026