August 22, 2026
- Cisco patched nine vulnerability groupings in Crosswork and Secure Workload, five of them CVSS 10.0 — SQL injection (CVE-2026-20030), missing authentication on critical functions (CVE-2026-20357) and external control of the file system (CVE-2026-20358) among them, all found during an internal engineering review with no reported exploitation (The Hacker News, Cisco advisory). · Vulnerabilities & Exploits
in A CVSS 10.0 Lands in Entra ID — and Microsoft Can't Keep Its Exploitation Story Straight