Cisco Patches Critical Vulnerabilities in Crosswork and Secure Workload Platforms
Cisco has released patches for 15 vulnerabilities, including critical flaws in its Crosswork and Secure Workload platforms that could lead to remote code execution and authentication bypass.
Cisco has issued urgent security updates addressing a total of 15 vulnerabilities across its product portfolio, with a particular focus on critical and high-severity flaws impacting its Crosswork and Secure Workload platforms. The patches aim to mitigate risks associated with remote code execution, authentication bypass, path traversal, and other severe security threats.
Four critical vulnerabilities were resolved in Cisco Crosswork version 7.2.1-SP. Three of these, tracked as CVE-2026-2030, CVE-2026-20357, and CVE-2026-20358, carry the highest possible CVSS score of 10/10. The fourth, CVE-2026-20359, is rated with a CVSS score of 9.9/10. These vulnerabilities encompass a range of issues including SQL injection, missing authentication, external control of the file system, and insufficient protection of credentials.
Successful exploitation of these Crosswork vulnerabilities could empower attackers to achieve remote code execution (RCE), bypass authentication mechanisms, perform path traversal attacks, and potentially overwrite or delete files on affected systems. The severity of these flaws underscores the importance of timely patching for organizations utilizing the Crosswork platform.
Simultaneously, Cisco released Secure Workload versions 4.0.4.16 and 3.10.9.1 with fixes for five additional vulnerabilities, four of which are classified as critical. These include CVE-2026-20315 and CVE-2026-20317, related to improper access control and authentication bypass; CVE-2026-20231, which groups code and OS command injection flaws; and CVE-2026-20318, covering input validation and path traversal issues. A fifth CVE, CVE-2026-20319, addresses buffer overflow and out-of-bounds write vulnerabilities.
Beyond these core platforms, Cisco also addressed a high-severity vulnerability in the Open Client Interface (OCI) XML parser of its BroadWorks platform. Tracked as CVE-2026-20320, this flaw allowed unauthenticated attackers to read sensitive configuration information by sending crafted XML messages, exploiting the default allowance of external entity resolution. This vulnerability was resolved in version RI.2026.07 of various BroadWorks components.
Further updates include fixes for medium-severity weaknesses found in Cisco Unified Intelligence Center, RoomOS, Industrial Ethernet (IE) 1000 series switches, and Packaged Contact Center Enterprise (CCE) and Unified Contact Center Enterprise (CCE). While these are rated lower in severity, they still represent potential security risks that Cisco advises users to address.
Cisco has stated that it is not currently aware of any of these 15 vulnerabilities being actively exploited in the wild. However, given the critical nature of several flaws, particularly those allowing RCE and authentication bypass, prompt application of the provided patches is strongly recommended for all affected users to prevent potential compromise.
This batch of patches highlights the ongoing challenges in securing complex enterprise software environments. Organizations relying on Cisco's extensive product suite must maintain vigilance and adhere to regular patching schedules to defend against evolving threat landscapes.