Source: Ministry of education information & communication security contingency platform
"" "" ""
| Publication Number | TACERT-ANA-2026082104085252 | Publication Time | 2026-08-21 16:32:55 |
| Incident Type | ANA-Vulnerability Alert | Discovery Time | 2026-08-21 16:32:55 |
| Impact Level | Low | ||
| [Subject] 【Vulnerability Alert】Cisco Crosswork Contains Four Critical Cybersecurity Vulnerabilities |
|||
| [Content]
Forwarded from TWCERTCC Cybersecurity Alert TWCERTCC-200-202608-00000017 The Cisco Secure Workload development team discovered multiple security vulnerabilities during an internal security review and has completed remediation. Currently, there is no evidence indicating that these vulnerabilities are being actively exploited. To assist customers in deploying security updates in a timely manner and simplify the vulnerability disclosure process, Cisco has publicly released the relevant vulnerability information and remediation recommendations. CVE-2026-20231 (CVSS: 9.9) is an Improper Neutralization of Special Elements vulnerability; CVE-2026-20315 (CVSS: 10.0) is an Improper Access Control vulnerability; CVE-2026-20317 (CVSS: 10.0) is an Improper Authentication vulnerability; CVE-2026-20318 (CVSS: 9.6) is an Improper Input Validation vulnerability. Information Sharing Level: WHITE (the intelligence content is information that may be publicly disclosed) |
|||
| [Affected Platform]
Cisco Secure Workload version 3.10 and earlier, Cisco Secure Workload version 4.0 |
|||
|
[Recommended Actions] Please update to the following versions: Cisco Secure Workload version 3.10.9.1 or later, Cisco Secure Workload version 4.0.4.16 or later |
|||
|
[Reference] |
|||