Cisco announced patches addressing 15 vulnerabilities across multiple products, including critical and high-severity issues in Crosswork and Secure Workload. Crosswork 7.2.1-SP fixes four critical CVEs (CVE-2026-20030, CVE-2026-20357, CVE-2026-20358 with CVSS 10.0, and CVE-2026-20359 with CVSS 9.9) involving SQL injection, missing authentication, external control of file system, and insufficient credential protection. These could lead to remote code execution, authentication bypass, path traversal, and file manipulation. Secure Workload versions 4.0.4.16 and 3.10.9.1 address five CVEs including improper access control, authentication bypass, code/OS command injection, input validation, path traversal, buffer overflow, and out-of-bounds write issues. Additionally, BroadWorks RI.2026.07 fixes a high-severity XML parser flaw (CVE-2026-20320) allowing unauthenticated remote reading of sensitive configuration via external entity resolution. Other medium-severity vulnerabilities were patched in Unified Intelligence Center, RoomOS, IE 1000 switches, and contact center products. Cisco reports no known exploitation in the wild.

Successful exploitation of these vulnerabilities could allow remote attackers to execute arbitrary code, bypass authentication mechanisms, perform path traversal and file overwrite or deletion, and read sensitive configuration data without authentication. This could lead to full system compromise, unauthorized access, and data exposure in affected Cisco products.

Cisco has released official patches for all identified vulnerabilities in Crosswork (7.2.1-SP), Secure Workload (4.0.4.16 and 3.10.9.1), and BroadWorks (RI.2026.07). Users should apply these updates promptly. Cisco is not aware of any active exploitation, and no additional mitigation beyond patching is indicated by the vendor advisory.