Advisories
Cisco PSIRT Unveils Batch of Critical & Medium Vulnerabilities – Immediate Patch Required
On Aug. 19 2026, Cisco’s PSIRT released a suite of advisories covering 12 CVEs across Crosswork, Secure Workload, BroadWorks, Unified Intelligence Center, RoomOS, Industrial Ethernet 1000 Series, and Contact Center products. Four critical (CVSS 10.0) affect Crosswork and Secure Workload hardening releases, while a high‑severity XML‑External‑Entity flaw hits BroadWorks. Medium‑rated issues include SQL injection, stack overflow, XSS, DoS, and server‑side request forgery. Cisco urges customers to deploy the fixed builds immediately and notes updates to its vulnerability disclosure process.
When the Cisco Product Security Incident Response Team (PSIRT) hit the press on August 19 2026, it dropped a volley of advisories that hit almost every major product line. The company’s hard‑ening releases for Crosswork and Secure Workload software now contain five critical CVEs, all with a CVSS base score of 10.0. The same level of risk is reflected in the Crosswork hardening release, where CVE‑2026‑20030, CVE‑2026‑20357, CVE‑2026‑20358 and CVE‑2026‑20359 have been identified as critical.
Other products are not immune. BroadWorks is vulnerable to an out‑of‑band blind XML External Entity injection (CVE‑2026‑20320, CVSS 7.5). The Unified Intelligence Center suffers a SQL injection flaw (CVE‑2026‑20327, CVSS 6.5), while RoomOS is exposed to a stack overflow (CVE‑2026‑20302, CVSS 6.1). Industrial Ethernet 1000 Series switches face a medium‑severity XSS (CVE‑2026‑20232, CVSS 5.4) and a DoS (CVE‑2026‑20177, CVSS 5.3). Finally, both Packaged Contact Center Enterprise and Unified Contact Center Enterprise are hit by a server‑side request forgery (CVE‑2026‑20314, CVSS 5.0).
What’s at stake?
- Crosswork & Secure Workload: 5 critical flaws that could allow remote code execution or privilege escalation.
- BroadWorks: XML External Entity injection that can leak sensitive data.
- Unified Intelligence Center: SQL injection that may expose or corrupt database contents.
- RoomOS: Stack overflow that could crash the system.
- Industrial Ethernet 1000 Series: XSS and DoS that threaten network reliability.
- Contact Center Enterprise: SRF that could redirect traffic to malicious servers.
To fully remediate the vulnerabilities disclosed on August 19, Cisco strongly recommends that customers upgrade to the fixed software indicated in the advisories. For more information about changes in Cisco PSIRT vulnerability disclosure, see Strengthening the Foundation: A Predictable, Customer‑Focused Response to AI‑Accelerated Vulnerability Discovery.
In short, if you’re running any of these Cisco products, patching should be your top priority. The CVEs are all publicly disclosed, and the risk is real and immediate.
Related vulnerabilities
Cisco PSIRT Issues July 1, 2026 Advisories: Catalyst Center File Read & Multiple ClamAV Flaws
Cisco’s Product Security Incident Response Team released a batch of advisories on July 1, 2026. The alerts cover a high‑severity arbitrary file‑read vulnerability in Cisco Catalyst Center (CVE‑2026‑20191) and a group of high‑impact ClamAV bugs (CVE‑2026‑20213 through CVE‑2026‑20244) that compromise several Cisco products. Cisco urges all customers to apply the available patches immediately and notes updates to its vulnerability disclosure framework.
Read briefing
Cisco ISE Zero‑Day Exploited in the Wild – Immediate Patch Required
Cisco’s Identity Services Engine (ISE) is under attack. The CVE‑2026‑76460 vulnerability, rated maximum severity, lets remote actors bypass authentication by sending crafted API requests. Cisco has released fixed releases for ISE and ISE‑PIC, but no workarounds exist. The company urges customers to apply the patch immediately, and CISA has added the flaw to its Known Exploited Vulnerabilities catalog, mandating federal agencies patch within three days.
Read briefing
GitLab Self‑Managed Installations: Immediate Upgrade to 18.8.4/18.7.4/18.6.6 Required
GitLab released critical patch releases 18.8.4, 18.7.4, and 18.6.6 on Feb 10 2026, addressing high‑severity vulnerabilities including an incomplete validation flaw in Web IDE and a denial‑of‑service issue. All self‑managed CE and EE deployments must update immediately; GitLab.com and Dedicated customers are already patched.
Read briefing
Cisco PSIRT Releases August 2026 Security Advisories: 13 Critical CVEs Across SD‑WAN, IOS XE, and More
On Aug 5 2026 Cisco’s Product Security Incident Response Team issued a wave of advisories covering 13 CVEs that span SD‑WAN, IOS XE, Integrated Management Controller, and other components. The most severe flaws—rated 9.8‑9.9 on CVSS—include argument‑injection and denial‑of‑service vectors that could cripple network control planes. Cisco has pushed hardening releases for Catalyst SD‑WAN and IOS XE, urging customers to patch or reconfigure to mitigate the risks.
Read briefing