Cisco Patches Nine Crosswork and Secure Workload Flaws, Five Scoring CVSS 10.0

Cisco has published another round of security updates for Crosswork platforms and Secure Workload Software as part of a continued comprehensive internal security review. Four of the security vulnerabilities affect Crosswork Data Gateway, Crosswork Network Controller, and Crosswork Planning, regardless of the device configuration. A brief description of each of the flaws is below -

Report facts: Cisco has released patches for nine vulnerabilities in its Crosswork platforms and Secure Workload software, including multiple flaws rated CVSS 10.0, affecting components like Crosswork Data Gateway, Network Controller, and Planning regardless of device configuration. These issues arise from Cisco’s internal security review and indicate critical weaknesses in widely deployed infrastructure and workload management products. RealGround analysis: While the article does not explicitly mention AI, these platforms can be part of the operational stack that supports AI workloads and automation, so unpatched critical flaws represent an AI supply chain exposure that could be used to disrupt, manipulate, or gain access to environments where AI systems run. Organizations should treat this as a supply chain risk by rapidly applying vendor patches, maintaining an SBOM-driven inventory of such dependencies, and integrating continuous security readiness reviews around infrastructure that underpins AI services.