IT Consultancy
IT Consultancy Get expert guidance to leverage technology for your business growth. We help you identify the right IT solutions, optimize infrastructure, and ensure your digital environment is secure,…
Cisco Patches Nine Crosswork and Secure Workload Flaws
Digital Marketing
Digital Marketing Grow your brand and reach the right audience with data-driven marketing strategies. We help you create campaigns that convert, manage social channels effectively, and optimize your d…
Privacy Policy
Privacy Policy At CometSoul, accessible from https://cometsoul.com, one of our main priorities is the privacy of our visitors. This Privacy Policy document contains types of information that is collec…
Terms and Conditions
Welcome to CometSoul! These terms and conditions outline the rules and regulations for the use of CometSoul’s Website, located at https://cometsoul.com. By accessing this website we assume you a…
Disclaimer
If you require any more information or have any questions about our site’s disclaimer, please feel free to contact us. Disclaimers for CometSoul All the information on this website – https…
Managed Wi-Fi Service
Managed Wi-Fi Service Build a fast, stable, and secure Wi-Fi for your business at Zero depreciation cost. Enterprise-Grade Guest Wi-Fi With $0 Upfront Hardware Costs. We provide, install, and support …
Smart Business System Integrator
Smart Business System Integrator Simplify your daily operations with smart systems that automate bookings, schedules, and routine tasks so you can focus on growing your business. We set up and integra…
IT Procurement & Hardware Managed Service
IT Procurement & Hardware Managed Service Keep your technology running smoothly from the hardware you use every day to the systems that power your business. We provide end-to-end IT management so …
Cisco has released important security updates for Crosswork and Secure Workload. In total, the company fixed nine vulnerabilities. Five of them received the maximum CVSS score of 10.0.
Cisco found the issues during an internal security review. Therefore, customers should update affected systems as soon as possible.
Critical Cisco Crosswork Flaws
Four vulnerabilities affect Cisco Crosswork Data Gateway, Crosswork Network Controller, and Crosswork Planning.
Three of them have a CVSS score of 10.0. These are CVE-2026-20030, CVE-2026-20357, and CVE-2026-20358.
The issues include SQL injection, missing authentication, and unsafe file system access.
In addition, CVE-2026-20359 has a CVSS score of 9.9. This flaw involves credentials that are not protected well enough.
Cisco Crosswork version 7.2.1 and earlier are affected. The fixes are available in version 7.2.1-SP.
Five Cisco Secure Workload Flaws
Cisco also fixed five vulnerabilities in Secure Workload. Both SaaS and on-premise deployments are included.
CVE-2026-20315 and CVE-2026-20317 have CVSS scores of 10.0. These flaws affect access control and authentication.
Meanwhile, CVE-2026-20231 has a score of 9.9 and includes command injection risks. CVE-2026-20318 has a score of 9.6, while CVE-2026-20319 has a score of 7.5.
Secure Workload 3.10 and earlier should be updated to version 3.10.9.1. Version 4.0 users should move to 4.0.4.16.
Have the Flaws Been Exploited?
Cisco says it is not aware of active exploitation of these vulnerabilities.
However, there are no workarounds available. Therefore, installing the security updates is the main fix.
Cisco software is also widely used in enterprise networks. As a result, leaving critical systems unpatched can create unnecessary risk.
What Should IT Teams Do?
First, check the Cisco Crosswork and Secure Workload versions in use.
If an affected version is installed, update to the fixed release. Also, restrict access to management interfaces where possible.
Finally, monitor logs and unusual login activity. This can help teams detect suspicious behavior earlier.
Key Takeaway
Cisco has patched nine security flaws in Crosswork and Secure Workload. Five of the vulnerabilities have the maximum CVSS score of 10.0.
Although Cisco has not seen active exploitation, the risk remains serious. Organizations should update affected systems as soon as possible.
Source: https://thehackernews.com/2026/08/cisco-patches-nine-crosswork-and-secure.html