Cisco has released a series of security patches addressing nine vulnerabilities across its Crosswork platforms and Secure Workload software, with six of these flaws receiving the maximum CVSS score of 10.0. The vulnerabilities were discovered during an internal security review conducted by Cisco's engineering team, which included the use of advanced AI models. As of the announcement on August 21, 2026, Cisco stated there is no evidence of these vulnerabilities being actively exploited in the wild.
The affected Crosswork products include Crosswork Data Gateway, Crosswork Network Controller, and Crosswork Planning, specifically versions 7.2.1 and earlier. These issues have been resolved in version 7.2.1-SP. Four vulnerabilities were identified in these platforms:
CVE-2026-20030 (CVSS 10.0): An SQL injection flaw that could allow an attacker to manipulate database queries.
CVE-2026-20357 (CVSS 10.0): A missing authentication vulnerability for critical functions, enabling unauthorized operations.
CVE-2026-20358 (CVSS 10.0): An external control of file system vulnerability, which could permit an external actor to influence file operations.
CVE-2026-20359 (CVSS 9.9): An insufficiently protected credentials vulnerability, indicating inadequate security for stored login information.
Additionally, five vulnerabilities were patched in Cisco Secure Workload, impacting both its cloud SaaS and on-premises deployments. These fixes are available in Secure Workload Release 3.10.9.1 for the 3.10 branch and earlier versions, and 4.0.4.16 for the 4.0 branch. The Secure Workload vulnerabilities include:
CVE-2026-20231 (CVSS 9.9): A cluster of improper neutralization of special elements vulnerabilities, encompassing command, operating system, and argument injection.
CVE-2026-20315 (CVSS 10.0): A set of improper access control vulnerabilities, covering issues with authorization, authentication, privileges, and bypasses.
CVE-2026-20317 (CVSS 10.0): A group of improper authentication vulnerabilities, including missing authentication, authentication bypass, and reliance on untrusted inputs.
CVE-2026-20318 (CVSS 9.6): A collection of improper input validation vulnerabilities, such as input validation, path traversal, and external path control.
CVE-2026-20319 (CVSS 7.5): A set of improper restriction of operations within memory buffer vulnerabilities, including buffer overflows and out-of-bounds writes.
Cisco has grouped these issues by their Common Weakness Enumeration (CWE) class and assigned a single Common Vulnerabilities and Exposures (CVE) ID to each grouping to streamline the disclosure process and assist customers with patching. The company emphasizes that these vulnerabilities were discovered internally and are not known to be under active attack. However, the high CVSS scores, particularly the six maximum-severity flaws, suggest that organizations using these Cisco products should prioritize applying the available patches.
