Cisco Patches Nine Critical Vulnerabilities Including Five CVSS 10.0 Flaws in Network Infrastructure
In August 2026, Cisco released critical security patches addressing nine severe vulnerabilities across its Crosswork platforms and Secure Workload software. The flaws included five vulnerabilities scoring CVSS 10.0, affecting network management and workload security products used extensively in enterprise environments. Four vulnerabilities impacted Crosswork Data Gateway, Network Controller, and Planning platforms, including SQL injection and missing authentication issues. Five additional vulnerabilities affected Cisco Secure Workload deployments, encompassing improper access control, authentication bypass, and command injection flaws. These vulnerabilities were discovered during internal security testing and were not known to be actively exploited at the time of disclosure. The widespread deployment of Cisco infrastructure in enterprise networks makes these vulnerabilities particularly concerning, as they could provide attackers with significant access to critical network management and security monitoring systems if exploited.
Kill Chain
