Thehackernews Cisco Patches Nine Critical Flaws, Five Rated CVSS 10.0
Article Content
- •Cisco patched nine critical vulnerabilities, five rated CVSS 10.0.
- •Flaws include access-control and SQL injection issues affecting Secure Workload and Crosswork.
- •No known exploitation of these vulnerabilities has been reported.
Cisco has released patches for nine critical vulnerabilities across its Secure Workload and Crosswork platforms. Among these, five vulnerabilities received a maximum CVSS score of 10.0, indicating severe access-control and SQL injection issues. The flaws were identified during an internal security review, and none are currently known to be exploited. Affected customers include both SaaS and on-premises users of Cisco products. The vulnerabilities highlight significant security risks that require immediate attention from system administrators. Cisco has urged users to apply the updates promptly to mitigate potential threats.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (5)
Following this threat?
Track Cisco in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical Authentication Bypass in Cisco Catalyst SD-WAN Manager Exploited On September 30, 2026, Cisco disclosed a critical vulnerability (CVE-2026-76504) in the Catalyst SD-WAN Manager that allows unauthenticated remote attackers to bypass authentication and gain admin-level access to the system. This flaw stems from improper handling of URI encoding in HTTP requests, enabling attackers to… 
Critical Authentication Bypass in Rejetto HFS Exploited Within 24 Hours Anthropic's Mythos model identified a critical authentication bypass in Rejetto HTTP File Server (HFS), tracked as CVE-2026-61500, allowing remote code execution. Discovered by Horizon3 researcher Zach Hanley, the flaw was revealed on September 27, 2026, and exploitation began within 24 hours, with attacks traced to…