CVE Tools
Track your stack

Cisco Patches Nine Crosswork and Secure Workload Flaws, Five Scoring CVSS 10.0

The Hacker NewsBy The Hacker News

PatchCrosswork Data GatewayCrosswork Network Controller

Our summary

Cisco has issued security updates addressing nine vulnerabilities across its Crosswork and Secure Workload products, discovered during an internal security review. Four high-severity issues affect Crosswork Data Gateway, Network Controller, and Planning, including CVE-2026-20030, CVE-2026-20357, CVE-2026-20358, and CVE-2026-20359, all of which are fixed in Release version 7.2.1-SP. Additionally, five vulnerabilities impact Secure Workload SaaS and on-premises deployments, such as CVE-2026-20315 and CVE-2026-20317, with fixes available in versions 3.10.9.1 and 4.0.4.16. Cisco states these flaws are not currently being actively exploited but urges administrators to apply the latest updates promptly to mitigate risk.

Read at The Hacker News

The Hacker News publishes this story on its own site; we link to it rather than reprint it.

  1. The Hacker News⚡ Weekly Recap: AI-Powered PLC Attacks, GitLab Attacks, Stripe Key Leaks and MoreCVE-2026-20030, CVE-2026-20231 +7
  2. SecurityWeekCisco Patches Critical Crosswork, Secure Workload VulnerabilitiesCVE-2026-20030, CVE-2026-20231 +7
  3. The Hacker News⚡ Weekly Recap: VMware Exploits, Windows 0-Day, MCP Attacks, Browser Hijacks and MoreCVE-2026-20349
  4. Help Net SecurityWeek in review: Salesforce and ServiceNow portals exposed for 17 months, exploited Metabase 0-dayCVE-2026-20349
  5. Help Net SecurityCisco fixes vulnerability exploited to DoS its firewalls (CVE-2026-20349)CVE-2026-20349
  6. The Hacker NewsCisco ASA and FTD Flaw Exploited in the Wild Can Trigger Remote DoSCVE-2026-20349
  7. SecurityWeekCisco Patches Firewall Zero-Day Exploited for DoS AttacksCVE-2026-20349
  8. BleepingComputerCisco warns of ASA and FTD VPN flaw exploited to crash devicesCVE-2026-20349

Worried this affects your company?

Discuss a security assessment of your internet-facing systems. Scope agreed before testing.

Check my exposure

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store