Search
Find a vulnerability
Search criteria
18 vulnerabilities found for Cisco Secure Workload by Cisco
CVE-2026-20319 (GCVE-0-2026-20319)
Vulnerability from nvd – Published: 2026-08-19 16:19 – Updated: 2026-08-19 19:35
VLAI
EPSS
VEX
Title
Cisco Secure Workload Software Security Hardening Release August 2026 - Buffer Management Vulnerabilities
Summary
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.
The vulnerabilities tracked by CVE-2026-20319 are related to buffer management issues that are grouped under the Common Weakness Enumeration (CWE) CWE-119.
Severity
7.5 (High)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-08-19 19:34 UTC
CWE
- CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer
Assigner
References
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Cisco | Cisco Secure Workload |
Affected:
2.2.1.41
Affected: 3.2.1.18 Affected: 3.3.2.50 Affected: 3.4.1.28 Affected: 3.4.1.34 Affected: 2.3.1.45 Affected: 2.3.1.41 Affected: 3.3.2.28 Affected: 3.1.1.59 Affected: 2.0.2.20 Affected: 2.1.1.33 Affected: 2.1.1.29 Affected: 3.2.1.28 Affected: 3.4.1.35 Affected: 3.1.1.65 Affected: 3.1.1.67 Affected: 2.0.1.34 Affected: 2.3.1.49 Affected: 2.2.1.39 Affected: 3.4.1.19 Affected: 3.3.2.23 Affected: 3.1.1.61 Affected: 3.1.1.54 Affected: 3.5.1.17 Affected: 3.3.2.33 Affected: 3.5.1.1 Affected: 2.3.1.53 Affected: 3.5.1.20 Affected: 3.5.1.30 Affected: 3.3.2.16 Affected: 3.1.1.55 Affected: 3.4.1.6 Affected: 2.3.1.50 Affected: 2.3.1.52 Affected: 3.2.1.19 Affected: 2.2.1.35 Affected: 3.1.1.53 Affected: 3.1.1.70 Affected: 3.2.1.20 Affected: 3.5.1.2 Affected: 1.103.1.12 Affected: 2.3.1.51 Affected: 3.3.2.42 Affected: 3.4.1.1 Affected: 3.3.2.12 Affected: 2.1.1.31 Affected: 3.5.1.23 Affected: 3.3.2.53 Affected: 3.4.1.14 Affected: 3.3.2.2 Affected: 3.4.1.20 Affected: 3.3.2.35 Affected: 2.2.1.34 Affected: 1.102.21 Affected: 3.3.2.5 Affected: 3.5.1.31 Affected: 3.6.1.5 Affected: 3.2.1.31 Affected: 3.5.1.37 Affected: 3.4.1.40 Affected: 3.6.1.17 Affected: 3.6.1.21 Affected: 3.2.1.32 Affected: 3.2.1.33 Affected: 3.6.1.35 Affected: 3.6.1.36 Affected: 3.7.1.5 Affected: 3.6.1.47 Affected: 3.7.1.22 Affected: 3.6.1.52 Affected: 3.7.1.39 Affected: 3.8.1.1 Affected: 3.7.1.51 Affected: 3.8.1.19 Affected: 3.8.1.36 Affected: 3.7.1.59 Affected: 3.8.1.39 Affected: 3.9.1.1 Affected: 3.9.1.10 Affected: 3.9.1.24 Affected: 3.9.1.25 Affected: 3.9.1.28 Affected: 3.9.1.38 Affected: 3.8.1.53 Affected: 3.9.1.52 Affected: 3.10.1.1 Affected: 3.9.1.64 Affected: 3.10.2.11 Affected: 3.9.1.66 Affected: 3.10.3.19 Affected: 3.9.1.69 Affected: 3.10.4.8 Affected: 3.10.5.6 Affected: 4.0.1.1 Affected: 4.0.2.4 Affected: 4.0.2.5 Affected: 3.10.6.3 Affected: 3.10.7.4 Affected: 4.0.3.13 Affected: 4.0.3.17 Affected: 3.10.8.3 |
{
"containers": {
"adp": [
{
"descriptions": [
{
"lang": "en",
"value": "The CVE Program recognizes that this CVE Record provides vulnerability information that a Supplier CNA believes is very important to consumers. The CVE Program has flagged this CVE Record as it assigns a single CVE ID to a collection of individual vulnerabilities which does not align with CVE\u0027s \"one vulnerability, one ID\" principle, and therefore provides incomplete information. For further clarification, please see the CVE Program\u0027s blog, \"Preserving Vulnerability-Level Identification\" linked below. Details within the CNA container below are viewable by clicking on the CNA name."
}
],
"providerMetadata": {
"dateUpdated": "2026-08-19T18:31:51.184Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"url": "https://www.cve.org/Media/News/item/blog/2026/06/16/Preserving-Vulnerability-Level-Identification"
}
],
"tags": [
"x_bundling-flagged-by-CVE-Program"
]
},
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-20319",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-19T19:34:22.131347Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-19T19:35:32.543Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Cisco Secure Workload",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "2.2.1.41"
},
{
"status": "affected",
"version": "3.2.1.18"
},
{
"status": "affected",
"version": "3.3.2.50"
},
{
"status": "affected",
"version": "3.4.1.28"
},
{
"status": "affected",
"version": "3.4.1.34"
},
{
"status": "affected",
"version": "2.3.1.45"
},
{
"status": "affected",
"version": "2.3.1.41"
},
{
"status": "affected",
"version": "3.3.2.28"
},
{
"status": "affected",
"version": "3.1.1.59"
},
{
"status": "affected",
"version": "2.0.2.20"
},
{
"status": "affected",
"version": "2.1.1.33"
},
{
"status": "affected",
"version": "2.1.1.29"
},
{
"status": "affected",
"version": "3.2.1.28"
},
{
"status": "affected",
"version": "3.4.1.35"
},
{
"status": "affected",
"version": "3.1.1.65"
},
{
"status": "affected",
"version": "3.1.1.67"
},
{
"status": "affected",
"version": "2.0.1.34"
},
{
"status": "affected",
"version": "2.3.1.49"
},
{
"status": "affected",
"version": "2.2.1.39"
},
{
"status": "affected",
"version": "3.4.1.19"
},
{
"status": "affected",
"version": "3.3.2.23"
},
{
"status": "affected",
"version": "3.1.1.61"
},
{
"status": "affected",
"version": "3.1.1.54"
},
{
"status": "affected",
"version": "3.5.1.17"
},
{
"status": "affected",
"version": "3.3.2.33"
},
{
"status": "affected",
"version": "3.5.1.1"
},
{
"status": "affected",
"version": "2.3.1.53"
},
{
"status": "affected",
"version": "3.5.1.20"
},
{
"status": "affected",
"version": "3.5.1.30"
},
{
"status": "affected",
"version": "3.3.2.16"
},
{
"status": "affected",
"version": "3.1.1.55"
},
{
"status": "affected",
"version": "3.4.1.6"
},
{
"status": "affected",
"version": "2.3.1.50"
},
{
"status": "affected",
"version": "2.3.1.52"
},
{
"status": "affected",
"version": "3.2.1.19"
},
{
"status": "affected",
"version": "2.2.1.35"
},
{
"status": "affected",
"version": "3.1.1.53"
},
{
"status": "affected",
"version": "3.1.1.70"
},
{
"status": "affected",
"version": "3.2.1.20"
},
{
"status": "affected",
"version": "3.5.1.2"
},
{
"status": "affected",
"version": "1.103.1.12"
},
{
"status": "affected",
"version": "2.3.1.51"
},
{
"status": "affected",
"version": "3.3.2.42"
},
{
"status": "affected",
"version": "3.4.1.1"
},
{
"status": "affected",
"version": "3.3.2.12"
},
{
"status": "affected",
"version": "2.1.1.31"
},
{
"status": "affected",
"version": "3.5.1.23"
},
{
"status": "affected",
"version": "3.3.2.53"
},
{
"status": "affected",
"version": "3.4.1.14"
},
{
"status": "affected",
"version": "3.3.2.2"
},
{
"status": "affected",
"version": "3.4.1.20"
},
{
"status": "affected",
"version": "3.3.2.35"
},
{
"status": "affected",
"version": "2.2.1.34"
},
{
"status": "affected",
"version": "1.102.21"
},
{
"status": "affected",
"version": "3.3.2.5"
},
{
"status": "affected",
"version": "3.5.1.31"
},
{
"status": "affected",
"version": "3.6.1.5"
},
{
"status": "affected",
"version": "3.2.1.31"
},
{
"status": "affected",
"version": "3.5.1.37"
},
{
"status": "affected",
"version": "3.4.1.40"
},
{
"status": "affected",
"version": "3.6.1.17"
},
{
"status": "affected",
"version": "3.6.1.21"
},
{
"status": "affected",
"version": "3.2.1.32"
},
{
"status": "affected",
"version": "3.2.1.33"
},
{
"status": "affected",
"version": "3.6.1.35"
},
{
"status": "affected",
"version": "3.6.1.36"
},
{
"status": "affected",
"version": "3.7.1.5"
},
{
"status": "affected",
"version": "3.6.1.47"
},
{
"status": "affected",
"version": "3.7.1.22"
},
{
"status": "affected",
"version": "3.6.1.52"
},
{
"status": "affected",
"version": "3.7.1.39"
},
{
"status": "affected",
"version": "3.8.1.1"
},
{
"status": "affected",
"version": "3.7.1.51"
},
{
"status": "affected",
"version": "3.8.1.19"
},
{
"status": "affected",
"version": "3.8.1.36"
},
{
"status": "affected",
"version": "3.7.1.59"
},
{
"status": "affected",
"version": "3.8.1.39"
},
{
"status": "affected",
"version": "3.9.1.1"
},
{
"status": "affected",
"version": "3.9.1.10"
},
{
"status": "affected",
"version": "3.9.1.24"
},
{
"status": "affected",
"version": "3.9.1.25"
},
{
"status": "affected",
"version": "3.9.1.28"
},
{
"status": "affected",
"version": "3.9.1.38"
},
{
"status": "affected",
"version": "3.8.1.53"
},
{
"status": "affected",
"version": "3.9.1.52"
},
{
"status": "affected",
"version": "3.10.1.1"
},
{
"status": "affected",
"version": "3.9.1.64"
},
{
"status": "affected",
"version": "3.10.2.11"
},
{
"status": "affected",
"version": "3.9.1.66"
},
{
"status": "affected",
"version": "3.10.3.19"
},
{
"status": "affected",
"version": "3.9.1.69"
},
{
"status": "affected",
"version": "3.10.4.8"
},
{
"status": "affected",
"version": "3.10.5.6"
},
{
"status": "affected",
"version": "4.0.1.1"
},
{
"status": "affected",
"version": "4.0.2.4"
},
{
"status": "affected",
"version": "4.0.2.5"
},
{
"status": "affected",
"version": "3.10.6.3"
},
{
"status": "affected",
"version": "3.10.7.4"
},
{
"status": "affected",
"version": "4.0.3.13"
},
{
"status": "affected",
"version": "4.0.3.17"
},
{
"status": "affected",
"version": "3.10.8.3"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "As part of Cisco\u0027s ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.\r\n\r\nThe vulnerabilities tracked by CVE-2026-20319 are related to buffer management issues that are grouped under the Common Weakness Enumeration (CWE) CWE-119."
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-119",
"description": "Improper Restriction of Operations within the Bounds of a Memory Buffer",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-19T16:19:44.681Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-hardening-csw1-shSvndWP",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-csw1-shSvndWP"
}
],
"source": {
"advisory": "cisco-sa-hardening-csw1-shSvndWP",
"defects": [
"CSCwu31108"
],
"discovery": "INTERNAL"
},
"title": "Cisco Secure Workload Software Security Hardening Release August 2026 - Buffer Management Vulnerabilities"
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2026-20319",
"datePublished": "2026-08-19T16:19:44.681Z",
"dateReserved": "2025-10-08T11:59:15.410Z",
"dateUpdated": "2026-08-19T19:35:32.543Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-20318 (GCVE-0-2026-20318)
Vulnerability from nvd – Published: 2026-08-19 16:19 – Updated: 2026-08-20 15:57
VLAI
EPSS
VEX
Title
Cisco Secure Workload Software Security Hardening Release August 2026 - Improper Input Validation Vulnerabilities
Summary
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.
The vulnerabilities tracked by CVE-2026-20318 are related to improper input validation issues that are grouped under the Common Weakness Enumeration (CWE) CWE-20.
Severity
9.6 (Critical)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-08-20 15:40 UTC
CWE
- CWE-20 - Improper Input Validation
Assigner
References
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Cisco | Cisco Secure Workload |
Affected:
2.2.1.41
Affected: 3.2.1.18 Affected: 3.3.2.50 Affected: 3.4.1.28 Affected: 3.4.1.34 Affected: 2.3.1.45 Affected: 2.3.1.41 Affected: 3.3.2.28 Affected: 3.1.1.59 Affected: 2.0.2.20 Affected: 2.1.1.33 Affected: 2.1.1.29 Affected: 3.2.1.28 Affected: 3.4.1.35 Affected: 3.1.1.65 Affected: 3.1.1.67 Affected: 2.0.1.34 Affected: 2.3.1.49 Affected: 2.2.1.39 Affected: 3.4.1.19 Affected: 3.3.2.23 Affected: 3.1.1.61 Affected: 3.1.1.54 Affected: 3.5.1.17 Affected: 3.3.2.33 Affected: 3.5.1.1 Affected: 2.3.1.53 Affected: 3.5.1.20 Affected: 3.5.1.30 Affected: 3.3.2.16 Affected: 3.1.1.55 Affected: 3.4.1.6 Affected: 2.3.1.50 Affected: 2.3.1.52 Affected: 3.2.1.19 Affected: 2.2.1.35 Affected: 3.1.1.53 Affected: 3.1.1.70 Affected: 3.2.1.20 Affected: 3.5.1.2 Affected: 1.103.1.12 Affected: 2.3.1.51 Affected: 3.3.2.42 Affected: 3.4.1.1 Affected: 3.3.2.12 Affected: 2.1.1.31 Affected: 3.5.1.23 Affected: 3.3.2.53 Affected: 3.4.1.14 Affected: 3.3.2.2 Affected: 3.4.1.20 Affected: 3.3.2.35 Affected: 2.2.1.34 Affected: 1.102.21 Affected: 3.3.2.5 Affected: 3.5.1.31 Affected: 3.6.1.5 Affected: 3.2.1.31 Affected: 3.5.1.37 Affected: 3.4.1.40 Affected: 3.6.1.17 Affected: 3.6.1.21 Affected: 3.2.1.32 Affected: 3.2.1.33 Affected: 3.6.1.35 Affected: 3.6.1.36 Affected: 3.7.1.5 Affected: 3.6.1.47 Affected: 3.7.1.22 Affected: 3.6.1.52 Affected: 3.7.1.39 Affected: 3.8.1.1 Affected: 3.7.1.51 Affected: 3.8.1.19 Affected: 3.8.1.36 Affected: 3.7.1.59 Affected: 3.8.1.39 Affected: 3.9.1.1 Affected: 3.9.1.10 Affected: 3.9.1.24 Affected: 3.9.1.25 Affected: 3.9.1.28 Affected: 3.9.1.38 Affected: 3.8.1.53 Affected: 3.9.1.52 Affected: 3.10.1.1 Affected: 3.9.1.64 Affected: 3.10.2.11 Affected: 3.9.1.66 Affected: 3.10.3.19 Affected: 3.9.1.69 Affected: 3.10.4.8 Affected: 3.10.5.6 Affected: 4.0.1.1 Affected: 4.0.2.4 Affected: 4.0.2.5 Affected: 3.10.6.3 Affected: 3.10.7.4 Affected: 4.0.3.13 Affected: 4.0.3.17 Affected: 3.10.8.3 |
{
"containers": {
"adp": [
{
"descriptions": [
{
"lang": "en",
"value": "The CVE Program recognizes that this CVE Record provides vulnerability information that a Supplier CNA believes is very important to consumers. The CVE Program has flagged this CVE Record as it assigns a single CVE ID to a collection of individual vulnerabilities which does not align with CVE\u0027s \"one vulnerability, one ID\" principle, and therefore provides incomplete information. For further clarification, please see the CVE Program\u0027s blog, \"Preserving Vulnerability-Level Identification\" linked below. Details within the CNA container below are viewable by clicking on the CNA name."
}
],
"providerMetadata": {
"dateUpdated": "2026-08-19T18:31:51.073Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"url": "https://www.cve.org/Media/News/item/blog/2026/06/16/Preserving-Vulnerability-Level-Identification"
}
],
"tags": [
"x_bundling-flagged-by-CVE-Program"
]
},
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-20318",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-20T15:40:33.282455Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-20T15:57:08.326Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Cisco Secure Workload",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "2.2.1.41"
},
{
"status": "affected",
"version": "3.2.1.18"
},
{
"status": "affected",
"version": "3.3.2.50"
},
{
"status": "affected",
"version": "3.4.1.28"
},
{
"status": "affected",
"version": "3.4.1.34"
},
{
"status": "affected",
"version": "2.3.1.45"
},
{
"status": "affected",
"version": "2.3.1.41"
},
{
"status": "affected",
"version": "3.3.2.28"
},
{
"status": "affected",
"version": "3.1.1.59"
},
{
"status": "affected",
"version": "2.0.2.20"
},
{
"status": "affected",
"version": "2.1.1.33"
},
{
"status": "affected",
"version": "2.1.1.29"
},
{
"status": "affected",
"version": "3.2.1.28"
},
{
"status": "affected",
"version": "3.4.1.35"
},
{
"status": "affected",
"version": "3.1.1.65"
},
{
"status": "affected",
"version": "3.1.1.67"
},
{
"status": "affected",
"version": "2.0.1.34"
},
{
"status": "affected",
"version": "2.3.1.49"
},
{
"status": "affected",
"version": "2.2.1.39"
},
{
"status": "affected",
"version": "3.4.1.19"
},
{
"status": "affected",
"version": "3.3.2.23"
},
{
"status": "affected",
"version": "3.1.1.61"
},
{
"status": "affected",
"version": "3.1.1.54"
},
{
"status": "affected",
"version": "3.5.1.17"
},
{
"status": "affected",
"version": "3.3.2.33"
},
{
"status": "affected",
"version": "3.5.1.1"
},
{
"status": "affected",
"version": "2.3.1.53"
},
{
"status": "affected",
"version": "3.5.1.20"
},
{
"status": "affected",
"version": "3.5.1.30"
},
{
"status": "affected",
"version": "3.3.2.16"
},
{
"status": "affected",
"version": "3.1.1.55"
},
{
"status": "affected",
"version": "3.4.1.6"
},
{
"status": "affected",
"version": "2.3.1.50"
},
{
"status": "affected",
"version": "2.3.1.52"
},
{
"status": "affected",
"version": "3.2.1.19"
},
{
"status": "affected",
"version": "2.2.1.35"
},
{
"status": "affected",
"version": "3.1.1.53"
},
{
"status": "affected",
"version": "3.1.1.70"
},
{
"status": "affected",
"version": "3.2.1.20"
},
{
"status": "affected",
"version": "3.5.1.2"
},
{
"status": "affected",
"version": "1.103.1.12"
},
{
"status": "affected",
"version": "2.3.1.51"
},
{
"status": "affected",
"version": "3.3.2.42"
},
{
"status": "affected",
"version": "3.4.1.1"
},
{
"status": "affected",
"version": "3.3.2.12"
},
{
"status": "affected",
"version": "2.1.1.31"
},
{
"status": "affected",
"version": "3.5.1.23"
},
{
"status": "affected",
"version": "3.3.2.53"
},
{
"status": "affected",
"version": "3.4.1.14"
},
{
"status": "affected",
"version": "3.3.2.2"
},
{
"status": "affected",
"version": "3.4.1.20"
},
{
"status": "affected",
"version": "3.3.2.35"
},
{
"status": "affected",
"version": "2.2.1.34"
},
{
"status": "affected",
"version": "1.102.21"
},
{
"status": "affected",
"version": "3.3.2.5"
},
{
"status": "affected",
"version": "3.5.1.31"
},
{
"status": "affected",
"version": "3.6.1.5"
},
{
"status": "affected",
"version": "3.2.1.31"
},
{
"status": "affected",
"version": "3.5.1.37"
},
{
"status": "affected",
"version": "3.4.1.40"
},
{
"status": "affected",
"version": "3.6.1.17"
},
{
"status": "affected",
"version": "3.6.1.21"
},
{
"status": "affected",
"version": "3.2.1.32"
},
{
"status": "affected",
"version": "3.2.1.33"
},
{
"status": "affected",
"version": "3.6.1.35"
},
{
"status": "affected",
"version": "3.6.1.36"
},
{
"status": "affected",
"version": "3.7.1.5"
},
{
"status": "affected",
"version": "3.6.1.47"
},
{
"status": "affected",
"version": "3.7.1.22"
},
{
"status": "affected",
"version": "3.6.1.52"
},
{
"status": "affected",
"version": "3.7.1.39"
},
{
"status": "affected",
"version": "3.8.1.1"
},
{
"status": "affected",
"version": "3.7.1.51"
},
{
"status": "affected",
"version": "3.8.1.19"
},
{
"status": "affected",
"version": "3.8.1.36"
},
{
"status": "affected",
"version": "3.7.1.59"
},
{
"status": "affected",
"version": "3.8.1.39"
},
{
"status": "affected",
"version": "3.9.1.1"
},
{
"status": "affected",
"version": "3.9.1.10"
},
{
"status": "affected",
"version": "3.9.1.24"
},
{
"status": "affected",
"version": "3.9.1.25"
},
{
"status": "affected",
"version": "3.9.1.28"
},
{
"status": "affected",
"version": "3.9.1.38"
},
{
"status": "affected",
"version": "3.8.1.53"
},
{
"status": "affected",
"version": "3.9.1.52"
},
{
"status": "affected",
"version": "3.10.1.1"
},
{
"status": "affected",
"version": "3.9.1.64"
},
{
"status": "affected",
"version": "3.10.2.11"
},
{
"status": "affected",
"version": "3.9.1.66"
},
{
"status": "affected",
"version": "3.10.3.19"
},
{
"status": "affected",
"version": "3.9.1.69"
},
{
"status": "affected",
"version": "3.10.4.8"
},
{
"status": "affected",
"version": "3.10.5.6"
},
{
"status": "affected",
"version": "4.0.1.1"
},
{
"status": "affected",
"version": "4.0.2.4"
},
{
"status": "affected",
"version": "4.0.2.5"
},
{
"status": "affected",
"version": "3.10.6.3"
},
{
"status": "affected",
"version": "3.10.7.4"
},
{
"status": "affected",
"version": "4.0.3.13"
},
{
"status": "affected",
"version": "4.0.3.17"
},
{
"status": "affected",
"version": "3.10.8.3"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "As part of Cisco\u0027s ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.\r\n\r\nThe vulnerabilities tracked by CVE-2026-20318 are related to improper input validation issues that are grouped under the Common Weakness Enumeration (CWE) CWE-20."
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-20",
"description": "Improper Input Validation",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-19T16:19:24.093Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-hardening-csw1-shSvndWP",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-csw1-shSvndWP"
}
],
"source": {
"advisory": "cisco-sa-hardening-csw1-shSvndWP",
"defects": [
"CSCwu29742"
],
"discovery": "INTERNAL"
},
"title": "Cisco Secure Workload Software Security Hardening Release August 2026 - Improper Input Validation Vulnerabilities"
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2026-20318",
"datePublished": "2026-08-19T16:19:24.093Z",
"dateReserved": "2025-10-08T11:59:15.410Z",
"dateUpdated": "2026-08-20T15:57:08.326Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-20317 (GCVE-0-2026-20317)
Vulnerability from nvd – Published: 2026-08-19 16:19 – Updated: 2026-08-20 15:57
VLAI
EPSS
VEX
Title
Cisco Secure Workload Software Security Hardening Release August 2026 - Improper Authentication Vulnerabilities
Summary
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.
The vulnerabilities tracked by CVE-2026-20317 are related to improper authentication issues that are grouped under the Common Weakness Enumeration (CWE) CWE-287.
Severity
10 (Critical)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-08-20 15:40 UTC
CWE
- CWE-287 - Improper Authentication
Assigner
References
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Cisco | Cisco Secure Workload |
Affected:
2.2.1.41
Affected: 3.2.1.18 Affected: 3.3.2.50 Affected: 3.4.1.28 Affected: 3.4.1.34 Affected: 2.3.1.45 Affected: 2.3.1.41 Affected: 3.3.2.28 Affected: 3.1.1.59 Affected: 2.0.2.20 Affected: 2.1.1.33 Affected: 2.1.1.29 Affected: 3.2.1.28 Affected: 3.4.1.35 Affected: 3.1.1.65 Affected: 3.1.1.67 Affected: 2.0.1.34 Affected: 2.3.1.49 Affected: 2.2.1.39 Affected: 3.4.1.19 Affected: 3.3.2.23 Affected: 3.1.1.61 Affected: 3.1.1.54 Affected: 3.5.1.17 Affected: 3.3.2.33 Affected: 3.5.1.1 Affected: 2.3.1.53 Affected: 3.5.1.20 Affected: 3.5.1.30 Affected: 3.3.2.16 Affected: 3.1.1.55 Affected: 3.4.1.6 Affected: 2.3.1.50 Affected: 2.3.1.52 Affected: 3.2.1.19 Affected: 2.2.1.35 Affected: 3.1.1.53 Affected: 3.1.1.70 Affected: 3.2.1.20 Affected: 3.5.1.2 Affected: 1.103.1.12 Affected: 2.3.1.51 Affected: 3.3.2.42 Affected: 3.4.1.1 Affected: 3.3.2.12 Affected: 2.1.1.31 Affected: 3.5.1.23 Affected: 3.3.2.53 Affected: 3.4.1.14 Affected: 3.3.2.2 Affected: 3.4.1.20 Affected: 3.3.2.35 Affected: 2.2.1.34 Affected: 1.102.21 Affected: 3.3.2.5 Affected: 3.5.1.31 Affected: 3.6.1.5 Affected: 3.2.1.31 Affected: 3.5.1.37 Affected: 3.4.1.40 Affected: 3.6.1.17 Affected: 3.6.1.21 Affected: 3.2.1.32 Affected: 3.2.1.33 Affected: 3.6.1.35 Affected: 3.6.1.36 Affected: 3.7.1.5 Affected: 3.6.1.47 Affected: 3.7.1.22 Affected: 3.6.1.52 Affected: 3.7.1.39 Affected: 3.8.1.1 Affected: 3.7.1.51 Affected: 3.8.1.19 Affected: 3.8.1.36 Affected: 3.7.1.59 Affected: 3.8.1.39 Affected: 3.9.1.1 Affected: 3.9.1.10 Affected: 3.9.1.24 Affected: 3.9.1.25 Affected: 3.9.1.28 Affected: 3.9.1.38 Affected: 3.8.1.53 Affected: 3.9.1.52 Affected: 3.10.1.1 Affected: 3.9.1.64 Affected: 3.10.2.11 Affected: 3.9.1.66 Affected: 3.10.3.19 Affected: 3.9.1.69 Affected: 3.10.4.8 Affected: 3.10.5.6 Affected: 4.0.1.1 Affected: 4.0.2.4 Affected: 4.0.2.5 Affected: 3.10.6.3 Affected: 3.10.7.4 Affected: 4.0.3.13 Affected: 4.0.3.17 Affected: 3.10.8.3 |
{
"containers": {
"adp": [
{
"descriptions": [
{
"lang": "en",
"value": "The CVE Program recognizes that this CVE Record provides vulnerability information that a Supplier CNA believes is very important to consumers. The CVE Program has flagged this CVE Record as it assigns a single CVE ID to a collection of individual vulnerabilities which does not align with CVE\u0027s \"one vulnerability, one ID\" principle, and therefore provides incomplete information. For further clarification, please see the CVE Program\u0027s blog, \"Preserving Vulnerability-Level Identification\" linked below. Details within the CNA container below are viewable by clicking on the CNA name."
}
],
"providerMetadata": {
"dateUpdated": "2026-08-19T18:31:50.971Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"url": "https://www.cve.org/Media/News/item/blog/2026/06/16/Preserving-Vulnerability-Level-Identification"
}
],
"tags": [
"x_bundling-flagged-by-CVE-Program"
]
},
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-20317",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-20T15:40:41.775734Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-20T15:57:08.173Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Cisco Secure Workload",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "2.2.1.41"
},
{
"status": "affected",
"version": "3.2.1.18"
},
{
"status": "affected",
"version": "3.3.2.50"
},
{
"status": "affected",
"version": "3.4.1.28"
},
{
"status": "affected",
"version": "3.4.1.34"
},
{
"status": "affected",
"version": "2.3.1.45"
},
{
"status": "affected",
"version": "2.3.1.41"
},
{
"status": "affected",
"version": "3.3.2.28"
},
{
"status": "affected",
"version": "3.1.1.59"
},
{
"status": "affected",
"version": "2.0.2.20"
},
{
"status": "affected",
"version": "2.1.1.33"
},
{
"status": "affected",
"version": "2.1.1.29"
},
{
"status": "affected",
"version": "3.2.1.28"
},
{
"status": "affected",
"version": "3.4.1.35"
},
{
"status": "affected",
"version": "3.1.1.65"
},
{
"status": "affected",
"version": "3.1.1.67"
},
{
"status": "affected",
"version": "2.0.1.34"
},
{
"status": "affected",
"version": "2.3.1.49"
},
{
"status": "affected",
"version": "2.2.1.39"
},
{
"status": "affected",
"version": "3.4.1.19"
},
{
"status": "affected",
"version": "3.3.2.23"
},
{
"status": "affected",
"version": "3.1.1.61"
},
{
"status": "affected",
"version": "3.1.1.54"
},
{
"status": "affected",
"version": "3.5.1.17"
},
{
"status": "affected",
"version": "3.3.2.33"
},
{
"status": "affected",
"version": "3.5.1.1"
},
{
"status": "affected",
"version": "2.3.1.53"
},
{
"status": "affected",
"version": "3.5.1.20"
},
{
"status": "affected",
"version": "3.5.1.30"
},
{
"status": "affected",
"version": "3.3.2.16"
},
{
"status": "affected",
"version": "3.1.1.55"
},
{
"status": "affected",
"version": "3.4.1.6"
},
{
"status": "affected",
"version": "2.3.1.50"
},
{
"status": "affected",
"version": "2.3.1.52"
},
{
"status": "affected",
"version": "3.2.1.19"
},
{
"status": "affected",
"version": "2.2.1.35"
},
{
"status": "affected",
"version": "3.1.1.53"
},
{
"status": "affected",
"version": "3.1.1.70"
},
{
"status": "affected",
"version": "3.2.1.20"
},
{
"status": "affected",
"version": "3.5.1.2"
},
{
"status": "affected",
"version": "1.103.1.12"
},
{
"status": "affected",
"version": "2.3.1.51"
},
{
"status": "affected",
"version": "3.3.2.42"
},
{
"status": "affected",
"version": "3.4.1.1"
},
{
"status": "affected",
"version": "3.3.2.12"
},
{
"status": "affected",
"version": "2.1.1.31"
},
{
"status": "affected",
"version": "3.5.1.23"
},
{
"status": "affected",
"version": "3.3.2.53"
},
{
"status": "affected",
"version": "3.4.1.14"
},
{
"status": "affected",
"version": "3.3.2.2"
},
{
"status": "affected",
"version": "3.4.1.20"
},
{
"status": "affected",
"version": "3.3.2.35"
},
{
"status": "affected",
"version": "2.2.1.34"
},
{
"status": "affected",
"version": "1.102.21"
},
{
"status": "affected",
"version": "3.3.2.5"
},
{
"status": "affected",
"version": "3.5.1.31"
},
{
"status": "affected",
"version": "3.6.1.5"
},
{
"status": "affected",
"version": "3.2.1.31"
},
{
"status": "affected",
"version": "3.5.1.37"
},
{
"status": "affected",
"version": "3.4.1.40"
},
{
"status": "affected",
"version": "3.6.1.17"
},
{
"status": "affected",
"version": "3.6.1.21"
},
{
"status": "affected",
"version": "3.2.1.32"
},
{
"status": "affected",
"version": "3.2.1.33"
},
{
"status": "affected",
"version": "3.6.1.35"
},
{
"status": "affected",
"version": "3.6.1.36"
},
{
"status": "affected",
"version": "3.7.1.5"
},
{
"status": "affected",
"version": "3.6.1.47"
},
{
"status": "affected",
"version": "3.7.1.22"
},
{
"status": "affected",
"version": "3.6.1.52"
},
{
"status": "affected",
"version": "3.7.1.39"
},
{
"status": "affected",
"version": "3.8.1.1"
},
{
"status": "affected",
"version": "3.7.1.51"
},
{
"status": "affected",
"version": "3.8.1.19"
},
{
"status": "affected",
"version": "3.8.1.36"
},
{
"status": "affected",
"version": "3.7.1.59"
},
{
"status": "affected",
"version": "3.8.1.39"
},
{
"status": "affected",
"version": "3.9.1.1"
},
{
"status": "affected",
"version": "3.9.1.10"
},
{
"status": "affected",
"version": "3.9.1.24"
},
{
"status": "affected",
"version": "3.9.1.25"
},
{
"status": "affected",
"version": "3.9.1.28"
},
{
"status": "affected",
"version": "3.9.1.38"
},
{
"status": "affected",
"version": "3.8.1.53"
},
{
"status": "affected",
"version": "3.9.1.52"
},
{
"status": "affected",
"version": "3.10.1.1"
},
{
"status": "affected",
"version": "3.9.1.64"
},
{
"status": "affected",
"version": "3.10.2.11"
},
{
"status": "affected",
"version": "3.9.1.66"
},
{
"status": "affected",
"version": "3.10.3.19"
},
{
"status": "affected",
"version": "3.9.1.69"
},
{
"status": "affected",
"version": "3.10.4.8"
},
{
"status": "affected",
"version": "3.10.5.6"
},
{
"status": "affected",
"version": "4.0.1.1"
},
{
"status": "affected",
"version": "4.0.2.4"
},
{
"status": "affected",
"version": "4.0.2.5"
},
{
"status": "affected",
"version": "3.10.6.3"
},
{
"status": "affected",
"version": "3.10.7.4"
},
{
"status": "affected",
"version": "4.0.3.13"
},
{
"status": "affected",
"version": "4.0.3.17"
},
{
"status": "affected",
"version": "3.10.8.3"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "As part of Cisco\u0027s ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.\r\n\r\nThe vulnerabilities tracked by CVE-2026-20317 are related to improper authentication issues that are grouped under the Common Weakness Enumeration (CWE) CWE-287."
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 10,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-287",
"description": "Improper Authentication",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-19T16:19:28.234Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-hardening-csw1-shSvndWP",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-csw1-shSvndWP"
}
],
"source": {
"advisory": "cisco-sa-hardening-csw1-shSvndWP",
"defects": [
"CSCwu12926"
],
"discovery": "INTERNAL"
},
"title": "Cisco Secure Workload Software Security Hardening Release August 2026 - Improper Authentication Vulnerabilities"
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2026-20317",
"datePublished": "2026-08-19T16:19:28.234Z",
"dateReserved": "2025-10-08T11:59:15.410Z",
"dateUpdated": "2026-08-20T15:57:08.173Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-20315 (GCVE-0-2026-20315)
Vulnerability from nvd – Published: 2026-08-19 16:19 – Updated: 2026-08-20 18:30
VLAI
EPSS
VEX
Title
Cisco Secure Workload Software Security Hardening Release August 2026 - Improper Access Control Vulnerabilities
Summary
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.
The vulnerabilities tracked by CVE-2026-20315 are related to improper access control issues that are grouped under the Common Weakness Enumeration (CWE) CWE-284.
Severity
10 (Critical)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-08-20 03:56 UTC
CWE
- CWE-284 - Improper Access Control
Assigner
References
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Cisco | Cisco Secure Workload |
Affected:
2.2.1.41
Affected: 3.2.1.18 Affected: 3.3.2.50 Affected: 3.4.1.28 Affected: 3.4.1.34 Affected: 2.3.1.45 Affected: 2.3.1.41 Affected: 3.3.2.28 Affected: 3.1.1.59 Affected: 2.0.2.20 Affected: 2.1.1.33 Affected: 2.1.1.29 Affected: 3.2.1.28 Affected: 3.4.1.35 Affected: 3.1.1.65 Affected: 3.1.1.67 Affected: 2.0.1.34 Affected: 2.3.1.49 Affected: 2.2.1.39 Affected: 3.4.1.19 Affected: 3.3.2.23 Affected: 3.1.1.61 Affected: 3.1.1.54 Affected: 3.5.1.17 Affected: 3.3.2.33 Affected: 3.5.1.1 Affected: 2.3.1.53 Affected: 3.5.1.20 Affected: 3.5.1.30 Affected: 3.3.2.16 Affected: 3.1.1.55 Affected: 3.4.1.6 Affected: 2.3.1.50 Affected: 2.3.1.52 Affected: 3.2.1.19 Affected: 2.2.1.35 Affected: 3.1.1.53 Affected: 3.1.1.70 Affected: 3.2.1.20 Affected: 3.5.1.2 Affected: 1.103.1.12 Affected: 2.3.1.51 Affected: 3.3.2.42 Affected: 3.4.1.1 Affected: 3.3.2.12 Affected: 2.1.1.31 Affected: 3.5.1.23 Affected: 3.3.2.53 Affected: 3.4.1.14 Affected: 3.3.2.2 Affected: 3.4.1.20 Affected: 3.3.2.35 Affected: 2.2.1.34 Affected: 1.102.21 Affected: 3.3.2.5 Affected: 3.5.1.31 Affected: 3.6.1.5 Affected: 3.2.1.31 Affected: 3.5.1.37 Affected: 3.4.1.40 Affected: 3.6.1.17 Affected: 3.6.1.21 Affected: 3.2.1.32 Affected: 3.2.1.33 Affected: 3.6.1.35 Affected: 3.6.1.36 Affected: 3.7.1.5 Affected: 3.6.1.47 Affected: 3.7.1.22 Affected: 3.6.1.52 Affected: 3.7.1.39 Affected: 3.8.1.1 Affected: 3.7.1.51 Affected: 3.8.1.19 Affected: 3.8.1.36 Affected: 3.7.1.59 Affected: 3.8.1.39 Affected: 3.9.1.1 Affected: 3.9.1.10 Affected: 3.9.1.24 Affected: 3.9.1.25 Affected: 3.9.1.28 Affected: 3.9.1.38 Affected: 3.8.1.53 Affected: 3.9.1.52 Affected: 3.10.1.1 Affected: 3.9.1.64 Affected: 3.10.2.11 Affected: 3.9.1.66 Affected: 3.10.3.19 Affected: 3.9.1.69 Affected: 3.10.4.8 Affected: 3.10.5.6 Affected: 4.0.1.1 Affected: 4.0.2.4 Affected: 4.0.2.5 Affected: 3.10.6.3 Affected: 3.10.7.4 Affected: 4.0.3.13 Affected: 4.0.3.17 Affected: 3.10.8.3 |
{
"containers": {
"adp": [
{
"descriptions": [
{
"lang": "en",
"value": "The CVE Program recognizes that this CVE Record provides vulnerability information that a Supplier CNA believes is very important to consumers. The CVE Program has flagged this CVE Record as it assigns a single CVE ID to a collection of individual vulnerabilities which does not align with CVE\u0027s \"one vulnerability, one ID\" principle, and therefore provides incomplete information. For further clarification, please see the CVE Program\u0027s blog, \"Preserving Vulnerability-Level Identification\" linked below. Details within the CNA container below are viewable by clicking on the CNA name."
}
],
"providerMetadata": {
"dateUpdated": "2026-08-19T18:31:50.867Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"url": "https://www.cve.org/Media/News/item/blog/2026/06/16/Preserving-Vulnerability-Level-Identification"
}
],
"tags": [
"x_bundling-flagged-by-CVE-Program"
]
},
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-20315",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-20T03:56:21.828713Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-20T18:30:20.497Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Cisco Secure Workload",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "2.2.1.41"
},
{
"status": "affected",
"version": "3.2.1.18"
},
{
"status": "affected",
"version": "3.3.2.50"
},
{
"status": "affected",
"version": "3.4.1.28"
},
{
"status": "affected",
"version": "3.4.1.34"
},
{
"status": "affected",
"version": "2.3.1.45"
},
{
"status": "affected",
"version": "2.3.1.41"
},
{
"status": "affected",
"version": "3.3.2.28"
},
{
"status": "affected",
"version": "3.1.1.59"
},
{
"status": "affected",
"version": "2.0.2.20"
},
{
"status": "affected",
"version": "2.1.1.33"
},
{
"status": "affected",
"version": "2.1.1.29"
},
{
"status": "affected",
"version": "3.2.1.28"
},
{
"status": "affected",
"version": "3.4.1.35"
},
{
"status": "affected",
"version": "3.1.1.65"
},
{
"status": "affected",
"version": "3.1.1.67"
},
{
"status": "affected",
"version": "2.0.1.34"
},
{
"status": "affected",
"version": "2.3.1.49"
},
{
"status": "affected",
"version": "2.2.1.39"
},
{
"status": "affected",
"version": "3.4.1.19"
},
{
"status": "affected",
"version": "3.3.2.23"
},
{
"status": "affected",
"version": "3.1.1.61"
},
{
"status": "affected",
"version": "3.1.1.54"
},
{
"status": "affected",
"version": "3.5.1.17"
},
{
"status": "affected",
"version": "3.3.2.33"
},
{
"status": "affected",
"version": "3.5.1.1"
},
{
"status": "affected",
"version": "2.3.1.53"
},
{
"status": "affected",
"version": "3.5.1.20"
},
{
"status": "affected",
"version": "3.5.1.30"
},
{
"status": "affected",
"version": "3.3.2.16"
},
{
"status": "affected",
"version": "3.1.1.55"
},
{
"status": "affected",
"version": "3.4.1.6"
},
{
"status": "affected",
"version": "2.3.1.50"
},
{
"status": "affected",
"version": "2.3.1.52"
},
{
"status": "affected",
"version": "3.2.1.19"
},
{
"status": "affected",
"version": "2.2.1.35"
},
{
"status": "affected",
"version": "3.1.1.53"
},
{
"status": "affected",
"version": "3.1.1.70"
},
{
"status": "affected",
"version": "3.2.1.20"
},
{
"status": "affected",
"version": "3.5.1.2"
},
{
"status": "affected",
"version": "1.103.1.12"
},
{
"status": "affected",
"version": "2.3.1.51"
},
{
"status": "affected",
"version": "3.3.2.42"
},
{
"status": "affected",
"version": "3.4.1.1"
},
{
"status": "affected",
"version": "3.3.2.12"
},
{
"status": "affected",
"version": "2.1.1.31"
},
{
"status": "affected",
"version": "3.5.1.23"
},
{
"status": "affected",
"version": "3.3.2.53"
},
{
"status": "affected",
"version": "3.4.1.14"
},
{
"status": "affected",
"version": "3.3.2.2"
},
{
"status": "affected",
"version": "3.4.1.20"
},
{
"status": "affected",
"version": "3.3.2.35"
},
{
"status": "affected",
"version": "2.2.1.34"
},
{
"status": "affected",
"version": "1.102.21"
},
{
"status": "affected",
"version": "3.3.2.5"
},
{
"status": "affected",
"version": "3.5.1.31"
},
{
"status": "affected",
"version": "3.6.1.5"
},
{
"status": "affected",
"version": "3.2.1.31"
},
{
"status": "affected",
"version": "3.5.1.37"
},
{
"status": "affected",
"version": "3.4.1.40"
},
{
"status": "affected",
"version": "3.6.1.17"
},
{
"status": "affected",
"version": "3.6.1.21"
},
{
"status": "affected",
"version": "3.2.1.32"
},
{
"status": "affected",
"version": "3.2.1.33"
},
{
"status": "affected",
"version": "3.6.1.35"
},
{
"status": "affected",
"version": "3.6.1.36"
},
{
"status": "affected",
"version": "3.7.1.5"
},
{
"status": "affected",
"version": "3.6.1.47"
},
{
"status": "affected",
"version": "3.7.1.22"
},
{
"status": "affected",
"version": "3.6.1.52"
},
{
"status": "affected",
"version": "3.7.1.39"
},
{
"status": "affected",
"version": "3.8.1.1"
},
{
"status": "affected",
"version": "3.7.1.51"
},
{
"status": "affected",
"version": "3.8.1.19"
},
{
"status": "affected",
"version": "3.8.1.36"
},
{
"status": "affected",
"version": "3.7.1.59"
},
{
"status": "affected",
"version": "3.8.1.39"
},
{
"status": "affected",
"version": "3.9.1.1"
},
{
"status": "affected",
"version": "3.9.1.10"
},
{
"status": "affected",
"version": "3.9.1.24"
},
{
"status": "affected",
"version": "3.9.1.25"
},
{
"status": "affected",
"version": "3.9.1.28"
},
{
"status": "affected",
"version": "3.9.1.38"
},
{
"status": "affected",
"version": "3.8.1.53"
},
{
"status": "affected",
"version": "3.9.1.52"
},
{
"status": "affected",
"version": "3.10.1.1"
},
{
"status": "affected",
"version": "3.9.1.64"
},
{
"status": "affected",
"version": "3.10.2.11"
},
{
"status": "affected",
"version": "3.9.1.66"
},
{
"status": "affected",
"version": "3.10.3.19"
},
{
"status": "affected",
"version": "3.9.1.69"
},
{
"status": "affected",
"version": "3.10.4.8"
},
{
"status": "affected",
"version": "3.10.5.6"
},
{
"status": "affected",
"version": "4.0.1.1"
},
{
"status": "affected",
"version": "4.0.2.4"
},
{
"status": "affected",
"version": "4.0.2.5"
},
{
"status": "affected",
"version": "3.10.6.3"
},
{
"status": "affected",
"version": "3.10.7.4"
},
{
"status": "affected",
"version": "4.0.3.13"
},
{
"status": "affected",
"version": "4.0.3.17"
},
{
"status": "affected",
"version": "3.10.8.3"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "As part of Cisco\u0027s ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.\r\n\r\nThe vulnerabilities tracked by CVE-2026-20315 are related to improper access control issues that are grouped under the Common Weakness Enumeration (CWE) CWE-284."
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 10,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-284",
"description": "Improper Access Control",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-19T16:19:36.686Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-hardening-csw1-shSvndWP",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-csw1-shSvndWP"
}
],
"source": {
"advisory": "cisco-sa-hardening-csw1-shSvndWP",
"defects": [
"CSCwu61354"
],
"discovery": "INTERNAL"
},
"title": "Cisco Secure Workload Software Security Hardening Release August 2026 - Improper Access Control Vulnerabilities"
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2026-20315",
"datePublished": "2026-08-19T16:19:36.686Z",
"dateReserved": "2025-10-08T11:59:15.410Z",
"dateUpdated": "2026-08-20T18:30:20.497Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-20231 (GCVE-0-2026-20231)
Vulnerability from nvd – Published: 2026-08-19 16:16 – Updated: 2026-08-20 18:28
VLAI
EPSS
VEX
Title
Cisco Secure Workload Software Security Hardening Release August 2026 - Improper Neutralization of Special Elements Vulnerabilities
Summary
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.
The vulnerabilities tracked by CVE-2026-20231 are related to improper neutralization of special elements issues that are grouped under the Common Weakness Enumeration (CWE) CWE-74.
Severity
9.9 (Critical)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-08-20 03:57 UTC
CWE
- CWE-74 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
Assigner
References
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Cisco | Cisco Secure Workload |
Affected:
2.2.1.41
Affected: 3.2.1.18 Affected: 3.3.2.50 Affected: 3.4.1.28 Affected: 3.4.1.34 Affected: 2.3.1.45 Affected: 2.3.1.41 Affected: 3.3.2.28 Affected: 3.1.1.59 Affected: 2.0.2.20 Affected: 2.1.1.33 Affected: 2.1.1.29 Affected: 3.2.1.28 Affected: 3.4.1.35 Affected: 3.1.1.65 Affected: 3.1.1.67 Affected: 2.0.1.34 Affected: 2.3.1.49 Affected: 2.2.1.39 Affected: 3.4.1.19 Affected: 3.3.2.23 Affected: 3.1.1.61 Affected: 3.1.1.54 Affected: 3.5.1.17 Affected: 3.3.2.33 Affected: 3.5.1.1 Affected: 2.3.1.53 Affected: 3.5.1.20 Affected: 3.5.1.30 Affected: 3.3.2.16 Affected: 3.1.1.55 Affected: 3.4.1.6 Affected: 2.3.1.50 Affected: 2.3.1.52 Affected: 3.2.1.19 Affected: 2.2.1.35 Affected: 3.1.1.53 Affected: 3.1.1.70 Affected: 3.2.1.20 Affected: 3.5.1.2 Affected: 1.103.1.12 Affected: 2.3.1.51 Affected: 3.3.2.42 Affected: 3.4.1.1 Affected: 3.3.2.12 Affected: 2.1.1.31 Affected: 3.5.1.23 Affected: 3.3.2.53 Affected: 3.4.1.14 Affected: 3.3.2.2 Affected: 3.4.1.20 Affected: 3.3.2.35 Affected: 2.2.1.34 Affected: 1.102.21 Affected: 3.3.2.5 Affected: 3.5.1.31 Affected: 3.6.1.5 Affected: 3.2.1.31 Affected: 3.5.1.37 Affected: 3.4.1.40 Affected: 3.6.1.17 Affected: 3.6.1.21 Affected: 3.2.1.32 Affected: 3.2.1.33 Affected: 3.6.1.35 Affected: 3.6.1.36 Affected: 3.7.1.5 Affected: 3.6.1.47 Affected: 3.7.1.22 Affected: 3.6.1.52 Affected: 3.7.1.39 Affected: 3.8.1.1 Affected: 3.7.1.51 Affected: 3.8.1.19 Affected: 3.8.1.36 Affected: 3.7.1.59 Affected: 3.8.1.39 Affected: 3.9.1.1 Affected: 3.9.1.10 Affected: 3.9.1.24 Affected: 3.9.1.25 Affected: 3.9.1.28 Affected: 3.9.1.38 Affected: 3.8.1.53 Affected: 3.9.1.52 Affected: 3.10.1.1 Affected: 3.9.1.64 Affected: 3.10.2.11 Affected: 3.9.1.66 Affected: 3.10.3.19 Affected: 3.9.1.69 Affected: 3.10.4.8 Affected: 3.10.5.6 Affected: 4.0.1.1 Affected: 4.0.2.4 Affected: 4.0.2.5 Affected: 3.10.6.3 Affected: 3.10.7.4 Affected: 4.0.3.13 Affected: 4.0.3.17 Affected: 3.10.8.3 |
{
"containers": {
"adp": [
{
"descriptions": [
{
"lang": "en",
"value": "The CVE Program recognizes that this CVE Record provides vulnerability information that a Supplier CNA believes is very important to consumers. The CVE Program has flagged this CVE Record as it assigns a single CVE ID to a collection of individual vulnerabilities which does not align with CVE\u0027s \"one vulnerability, one ID\" principle, and therefore provides incomplete information. For further clarification, please see the CVE Program\u0027s blog, \"Preserving Vulnerability-Level Identification\" linked below. Details within the CNA container below are viewable by clicking on the CNA name."
}
],
"providerMetadata": {
"dateUpdated": "2026-08-19T18:31:50.763Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"url": "https://www.cve.org/Media/News/item/blog/2026/06/16/Preserving-Vulnerability-Level-Identification"
}
],
"tags": [
"x_bundling-flagged-by-CVE-Program"
]
},
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-20231",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-20T03:57:03.665590Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-20T18:28:00.290Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Cisco Secure Workload",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "2.2.1.41"
},
{
"status": "affected",
"version": "3.2.1.18"
},
{
"status": "affected",
"version": "3.3.2.50"
},
{
"status": "affected",
"version": "3.4.1.28"
},
{
"status": "affected",
"version": "3.4.1.34"
},
{
"status": "affected",
"version": "2.3.1.45"
},
{
"status": "affected",
"version": "2.3.1.41"
},
{
"status": "affected",
"version": "3.3.2.28"
},
{
"status": "affected",
"version": "3.1.1.59"
},
{
"status": "affected",
"version": "2.0.2.20"
},
{
"status": "affected",
"version": "2.1.1.33"
},
{
"status": "affected",
"version": "2.1.1.29"
},
{
"status": "affected",
"version": "3.2.1.28"
},
{
"status": "affected",
"version": "3.4.1.35"
},
{
"status": "affected",
"version": "3.1.1.65"
},
{
"status": "affected",
"version": "3.1.1.67"
},
{
"status": "affected",
"version": "2.0.1.34"
},
{
"status": "affected",
"version": "2.3.1.49"
},
{
"status": "affected",
"version": "2.2.1.39"
},
{
"status": "affected",
"version": "3.4.1.19"
},
{
"status": "affected",
"version": "3.3.2.23"
},
{
"status": "affected",
"version": "3.1.1.61"
},
{
"status": "affected",
"version": "3.1.1.54"
},
{
"status": "affected",
"version": "3.5.1.17"
},
{
"status": "affected",
"version": "3.3.2.33"
},
{
"status": "affected",
"version": "3.5.1.1"
},
{
"status": "affected",
"version": "2.3.1.53"
},
{
"status": "affected",
"version": "3.5.1.20"
},
{
"status": "affected",
"version": "3.5.1.30"
},
{
"status": "affected",
"version": "3.3.2.16"
},
{
"status": "affected",
"version": "3.1.1.55"
},
{
"status": "affected",
"version": "3.4.1.6"
},
{
"status": "affected",
"version": "2.3.1.50"
},
{
"status": "affected",
"version": "2.3.1.52"
},
{
"status": "affected",
"version": "3.2.1.19"
},
{
"status": "affected",
"version": "2.2.1.35"
},
{
"status": "affected",
"version": "3.1.1.53"
},
{
"status": "affected",
"version": "3.1.1.70"
},
{
"status": "affected",
"version": "3.2.1.20"
},
{
"status": "affected",
"version": "3.5.1.2"
},
{
"status": "affected",
"version": "1.103.1.12"
},
{
"status": "affected",
"version": "2.3.1.51"
},
{
"status": "affected",
"version": "3.3.2.42"
},
{
"status": "affected",
"version": "3.4.1.1"
},
{
"status": "affected",
"version": "3.3.2.12"
},
{
"status": "affected",
"version": "2.1.1.31"
},
{
"status": "affected",
"version": "3.5.1.23"
},
{
"status": "affected",
"version": "3.3.2.53"
},
{
"status": "affected",
"version": "3.4.1.14"
},
{
"status": "affected",
"version": "3.3.2.2"
},
{
"status": "affected",
"version": "3.4.1.20"
},
{
"status": "affected",
"version": "3.3.2.35"
},
{
"status": "affected",
"version": "2.2.1.34"
},
{
"status": "affected",
"version": "1.102.21"
},
{
"status": "affected",
"version": "3.3.2.5"
},
{
"status": "affected",
"version": "3.5.1.31"
},
{
"status": "affected",
"version": "3.6.1.5"
},
{
"status": "affected",
"version": "3.2.1.31"
},
{
"status": "affected",
"version": "3.5.1.37"
},
{
"status": "affected",
"version": "3.4.1.40"
},
{
"status": "affected",
"version": "3.6.1.17"
},
{
"status": "affected",
"version": "3.6.1.21"
},
{
"status": "affected",
"version": "3.2.1.32"
},
{
"status": "affected",
"version": "3.2.1.33"
},
{
"status": "affected",
"version": "3.6.1.35"
},
{
"status": "affected",
"version": "3.6.1.36"
},
{
"status": "affected",
"version": "3.7.1.5"
},
{
"status": "affected",
"version": "3.6.1.47"
},
{
"status": "affected",
"version": "3.7.1.22"
},
{
"status": "affected",
"version": "3.6.1.52"
},
{
"status": "affected",
"version": "3.7.1.39"
},
{
"status": "affected",
"version": "3.8.1.1"
},
{
"status": "affected",
"version": "3.7.1.51"
},
{
"status": "affected",
"version": "3.8.1.19"
},
{
"status": "affected",
"version": "3.8.1.36"
},
{
"status": "affected",
"version": "3.7.1.59"
},
{
"status": "affected",
"version": "3.8.1.39"
},
{
"status": "affected",
"version": "3.9.1.1"
},
{
"status": "affected",
"version": "3.9.1.10"
},
{
"status": "affected",
"version": "3.9.1.24"
},
{
"status": "affected",
"version": "3.9.1.25"
},
{
"status": "affected",
"version": "3.9.1.28"
},
{
"status": "affected",
"version": "3.9.1.38"
},
{
"status": "affected",
"version": "3.8.1.53"
},
{
"status": "affected",
"version": "3.9.1.52"
},
{
"status": "affected",
"version": "3.10.1.1"
},
{
"status": "affected",
"version": "3.9.1.64"
},
{
"status": "affected",
"version": "3.10.2.11"
},
{
"status": "affected",
"version": "3.9.1.66"
},
{
"status": "affected",
"version": "3.10.3.19"
},
{
"status": "affected",
"version": "3.9.1.69"
},
{
"status": "affected",
"version": "3.10.4.8"
},
{
"status": "affected",
"version": "3.10.5.6"
},
{
"status": "affected",
"version": "4.0.1.1"
},
{
"status": "affected",
"version": "4.0.2.4"
},
{
"status": "affected",
"version": "4.0.2.5"
},
{
"status": "affected",
"version": "3.10.6.3"
},
{
"status": "affected",
"version": "3.10.7.4"
},
{
"status": "affected",
"version": "4.0.3.13"
},
{
"status": "affected",
"version": "4.0.3.17"
},
{
"status": "affected",
"version": "3.10.8.3"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "As part of Cisco\u0027s ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.\r\n\u0026nbsp;\r\nThe vulnerabilities tracked by CVE-2026-20231 are related to improper neutralization of special elements issues that are grouped under the Common Weakness Enumeration (CWE) CWE-74."
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.9,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-74",
"description": "Improper Neutralization of Special Elements in Output Used by a Downstream Component (\u0027Injection\u0027)",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-19T16:16:58.948Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-hardening-csw1-shSvndWP",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-csw1-shSvndWP"
}
],
"source": {
"advisory": "cisco-sa-hardening-csw1-shSvndWP",
"defects": [
"CSCwu14237"
],
"discovery": "INTERNAL"
},
"title": "Cisco Secure Workload Software Security Hardening Release August 2026 - Improper Neutralization of Special Elements Vulnerabilities"
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2026-20231",
"datePublished": "2026-08-19T16:16:58.948Z",
"dateReserved": "2025-10-08T11:59:15.399Z",
"dateUpdated": "2026-08-20T18:28:00.290Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-20223 (GCVE-0-2026-20223)
Vulnerability from nvd – Published: 2026-05-20 16:06 – Updated: 2026-05-21 03:55
VLAI
EPSS
VEX
Title
Cisco Secure Workload Unauthorized API Access Vulnerability
Summary
A vulnerability in the access validation of internal REST APIs of Cisco Secure Workload could allow an unauthenticated, remote attacker to access site resources with the privileges of the Site Admin role.
This vulnerability is due to insufficient validation and authentication when accessing REST API endpoints. An attacker could exploit this vulnerability if they are able to send a crafted API request to an affected endpoint. A successful exploit could allow the attacker to read sensitive information and make configuration changes across tenant boundaries with the privileges of the Site Admin user.
Severity
10 (Critical)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-05-20 00:00 UTC
CWE
- CWE-306 - Missing Authentication for Critical Function
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Cisco | Cisco Secure Workload |
Affected:
2.2.1.41
Affected: 3.2.1.18 Affected: 3.3.2.50 Affected: 3.4.1.28 Affected: 3.4.1.34 Affected: 2.3.1.45 Affected: 2.3.1.41 Affected: 3.3.2.28 Affected: 3.1.1.59 Affected: 2.0.2.20 Affected: 2.1.1.33 Affected: 2.1.1.29 Affected: 3.2.1.28 Affected: 3.4.1.35 Affected: 3.1.1.65 Affected: 3.1.1.67 Affected: 2.0.1.34 Affected: 2.3.1.49 Affected: 2.2.1.39 Affected: 3.4.1.19 Affected: 3.3.2.23 Affected: 3.1.1.61 Affected: 3.1.1.54 Affected: 3.5.1.17 Affected: 3.3.2.33 Affected: 3.5.1.1 Affected: 2.3.1.53 Affected: 3.5.1.20 Affected: 3.5.1.30 Affected: 3.3.2.16 Affected: 3.1.1.55 Affected: 3.4.1.6 Affected: 2.3.1.50 Affected: 2.3.1.52 Affected: 3.2.1.19 Affected: 2.2.1.35 Affected: 3.1.1.53 Affected: 3.1.1.70 Affected: 3.2.1.20 Affected: 3.5.1.2 Affected: 1.103.1.12 Affected: 2.3.1.51 Affected: 3.3.2.42 Affected: 3.4.1.1 Affected: 3.3.2.12 Affected: 2.1.1.31 Affected: 3.5.1.23 Affected: 3.3.2.53 Affected: 3.4.1.14 Affected: 3.3.2.2 Affected: 3.4.1.20 Affected: 3.3.2.35 Affected: 2.2.1.34 Affected: 1.102.21 Affected: 3.3.2.5 Affected: 3.5.1.31 Affected: 3.6.1.5 Affected: 3.2.1.31 Affected: 3.5.1.37 Affected: 3.4.1.40 Affected: 3.6.1.17 Affected: 3.6.1.21 Affected: 3.2.1.32 Affected: 3.2.1.33 Affected: 3.6.1.35 Affected: 3.6.1.36 Affected: 3.7.1.5 Affected: 3.6.1.47 Affected: 3.7.1.22 Affected: 3.6.1.52 Affected: 3.7.1.39 Affected: 3.8.1.1 Affected: 3.7.1.51 Affected: 3.8.1.19 Affected: 3.8.1.36 Affected: 3.7.1.59 Affected: 3.8.1.39 Affected: 3.9.1.1 Affected: 3.9.1.10 Affected: 3.9.1.24 Affected: 3.9.1.25 Affected: 3.9.1.28 Affected: 3.9.1.38 Affected: 3.8.1.53 Affected: 3.9.1.52 Affected: 3.10.1.1 Affected: 3.9.1.64 Affected: 3.10.2.11 Affected: 3.9.1.66 Affected: 3.10.3.19 Affected: 3.9.1.69 Affected: 3.10.4.8 Affected: 3.10.5.6 Affected: 4.0.1.1 Affected: 4.0.2.4 Affected: 4.0.2.5 Affected: 3.10.6.3 Affected: 3.10.7.4 Affected: 4.0.3.13 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-20223",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-05-20T00:00:00+00:00",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-05-21T03:55:37.210Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Cisco Secure Workload",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "2.2.1.41"
},
{
"status": "affected",
"version": "3.2.1.18"
},
{
"status": "affected",
"version": "3.3.2.50"
},
{
"status": "affected",
"version": "3.4.1.28"
},
{
"status": "affected",
"version": "3.4.1.34"
},
{
"status": "affected",
"version": "2.3.1.45"
},
{
"status": "affected",
"version": "2.3.1.41"
},
{
"status": "affected",
"version": "3.3.2.28"
},
{
"status": "affected",
"version": "3.1.1.59"
},
{
"status": "affected",
"version": "2.0.2.20"
},
{
"status": "affected",
"version": "2.1.1.33"
},
{
"status": "affected",
"version": "2.1.1.29"
},
{
"status": "affected",
"version": "3.2.1.28"
},
{
"status": "affected",
"version": "3.4.1.35"
},
{
"status": "affected",
"version": "3.1.1.65"
},
{
"status": "affected",
"version": "3.1.1.67"
},
{
"status": "affected",
"version": "2.0.1.34"
},
{
"status": "affected",
"version": "2.3.1.49"
},
{
"status": "affected",
"version": "2.2.1.39"
},
{
"status": "affected",
"version": "3.4.1.19"
},
{
"status": "affected",
"version": "3.3.2.23"
},
{
"status": "affected",
"version": "3.1.1.61"
},
{
"status": "affected",
"version": "3.1.1.54"
},
{
"status": "affected",
"version": "3.5.1.17"
},
{
"status": "affected",
"version": "3.3.2.33"
},
{
"status": "affected",
"version": "3.5.1.1"
},
{
"status": "affected",
"version": "2.3.1.53"
},
{
"status": "affected",
"version": "3.5.1.20"
},
{
"status": "affected",
"version": "3.5.1.30"
},
{
"status": "affected",
"version": "3.3.2.16"
},
{
"status": "affected",
"version": "3.1.1.55"
},
{
"status": "affected",
"version": "3.4.1.6"
},
{
"status": "affected",
"version": "2.3.1.50"
},
{
"status": "affected",
"version": "2.3.1.52"
},
{
"status": "affected",
"version": "3.2.1.19"
},
{
"status": "affected",
"version": "2.2.1.35"
},
{
"status": "affected",
"version": "3.1.1.53"
},
{
"status": "affected",
"version": "3.1.1.70"
},
{
"status": "affected",
"version": "3.2.1.20"
},
{
"status": "affected",
"version": "3.5.1.2"
},
{
"status": "affected",
"version": "1.103.1.12"
},
{
"status": "affected",
"version": "2.3.1.51"
},
{
"status": "affected",
"version": "3.3.2.42"
},
{
"status": "affected",
"version": "3.4.1.1"
},
{
"status": "affected",
"version": "3.3.2.12"
},
{
"status": "affected",
"version": "2.1.1.31"
},
{
"status": "affected",
"version": "3.5.1.23"
},
{
"status": "affected",
"version": "3.3.2.53"
},
{
"status": "affected",
"version": "3.4.1.14"
},
{
"status": "affected",
"version": "3.3.2.2"
},
{
"status": "affected",
"version": "3.4.1.20"
},
{
"status": "affected",
"version": "3.3.2.35"
},
{
"status": "affected",
"version": "2.2.1.34"
},
{
"status": "affected",
"version": "1.102.21"
},
{
"status": "affected",
"version": "3.3.2.5"
},
{
"status": "affected",
"version": "3.5.1.31"
},
{
"status": "affected",
"version": "3.6.1.5"
},
{
"status": "affected",
"version": "3.2.1.31"
},
{
"status": "affected",
"version": "3.5.1.37"
},
{
"status": "affected",
"version": "3.4.1.40"
},
{
"status": "affected",
"version": "3.6.1.17"
},
{
"status": "affected",
"version": "3.6.1.21"
},
{
"status": "affected",
"version": "3.2.1.32"
},
{
"status": "affected",
"version": "3.2.1.33"
},
{
"status": "affected",
"version": "3.6.1.35"
},
{
"status": "affected",
"version": "3.6.1.36"
},
{
"status": "affected",
"version": "3.7.1.5"
},
{
"status": "affected",
"version": "3.6.1.47"
},
{
"status": "affected",
"version": "3.7.1.22"
},
{
"status": "affected",
"version": "3.6.1.52"
},
{
"status": "affected",
"version": "3.7.1.39"
},
{
"status": "affected",
"version": "3.8.1.1"
},
{
"status": "affected",
"version": "3.7.1.51"
},
{
"status": "affected",
"version": "3.8.1.19"
},
{
"status": "affected",
"version": "3.8.1.36"
},
{
"status": "affected",
"version": "3.7.1.59"
},
{
"status": "affected",
"version": "3.8.1.39"
},
{
"status": "affected",
"version": "3.9.1.1"
},
{
"status": "affected",
"version": "3.9.1.10"
},
{
"status": "affected",
"version": "3.9.1.24"
},
{
"status": "affected",
"version": "3.9.1.25"
},
{
"status": "affected",
"version": "3.9.1.28"
},
{
"status": "affected",
"version": "3.9.1.38"
},
{
"status": "affected",
"version": "3.8.1.53"
},
{
"status": "affected",
"version": "3.9.1.52"
},
{
"status": "affected",
"version": "3.10.1.1"
},
{
"status": "affected",
"version": "3.9.1.64"
},
{
"status": "affected",
"version": "3.10.2.11"
},
{
"status": "affected",
"version": "3.9.1.66"
},
{
"status": "affected",
"version": "3.10.3.19"
},
{
"status": "affected",
"version": "3.9.1.69"
},
{
"status": "affected",
"version": "3.10.4.8"
},
{
"status": "affected",
"version": "3.10.5.6"
},
{
"status": "affected",
"version": "4.0.1.1"
},
{
"status": "affected",
"version": "4.0.2.4"
},
{
"status": "affected",
"version": "4.0.2.5"
},
{
"status": "affected",
"version": "3.10.6.3"
},
{
"status": "affected",
"version": "3.10.7.4"
},
{
"status": "affected",
"version": "4.0.3.13"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the\u0026nbsp;access validation of internal REST APIs of Cisco Secure Workload could allow an unauthenticated, remote attacker to access site resources with the privileges of the\u0026nbsp;Site Admin role.\r\n\r\nThis vulnerability is due to insufficient validation and authentication when accessing REST API endpoints. An attacker could exploit this vulnerability if they are able to send a crafted API request to an affected endpoint. A successful exploit could allow the attacker to read sensitive information and make configuration changes across tenant boundaries with the privileges of the\u0026nbsp;Site Admin user.\u0026nbsp;"
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 10,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-306",
"description": "Missing Authentication for Critical Function",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-05-20T16:06:30.740Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-csw-pnbsa-g8WEnuy",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-csw-pnbsa-g8WEnuy"
}
],
"source": {
"advisory": "cisco-sa-csw-pnbsa-g8WEnuy",
"defects": [
"CSCwt99942"
],
"discovery": "INTERNAL"
},
"title": "Cisco Secure Workload Unauthorized API Access Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2026-20223",
"datePublished": "2026-05-20T16:06:30.740Z",
"dateReserved": "2025-10-08T11:59:15.399Z",
"dateUpdated": "2026-05-21T03:55:37.210Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2022-20652 (GCVE-0-2022-20652)
Vulnerability from nvd – Published: 2024-11-15 15:58 – Updated: 2024-11-19 16:08
VLAI
EPSS
VEX
Title
Cisco Tetration Command Injection Vulnerability
Summary
A vulnerability in the web-based management interface and in the API subsystem of Cisco Tetration could allow an authenticated, remote attacker to inject arbitrary commands to be executed with root-level privileges on the underlying operating system.
This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by submitting a crafted HTTP message to the affected system. A successful exploit could allow the attacker to execute commands with root-level privileges. To exploit this vulnerability, an attacker would need valid administrator-level credentials.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
Severity
6.5 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2024-11-15 19:42 UTC
CWE
- CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Assigner
References
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Cisco | Cisco Secure Workload |
Affected:
2.2.1.41
Affected: 3.2.1.18 Affected: 3.3.2.50 Affected: 3.4.1.28 Affected: 3.4.1.34 Affected: 2.3.1.45 Affected: 2.3.1.41 Affected: 3.3.2.28 Affected: 3.1.1.59 Affected: 2.0.2.20 Affected: 2.1.1.33 Affected: 2.1.1.29 Affected: 3.2.1.28 Affected: 3.4.1.35 Affected: 3.1.1.65 Affected: 3.1.1.67 Affected: 2.0.1.34 Affected: 2.3.1.49 Affected: 2.2.1.39 Affected: 3.4.1.19 Affected: 3.3.2.23 Affected: 3.1.1.61 Affected: 3.1.1.54 Affected: 3.5.1.17 Affected: 3.3.2.33 Affected: 3.5.1.1 Affected: 2.3.1.53 Affected: 3.5.1.20 Affected: 3.5.1.30 Affected: 3.3.2.16 Affected: 3.4.1.6 Affected: 2.3.1.50 Affected: 2.3.1.52 Affected: 3.2.1.19 Affected: 2.2.1.35 Affected: 3.1.1.53 Affected: 3.1.1.70 Affected: 3.2.1.20 Affected: 3.5.1.2 Affected: 1.103.1.12 Affected: 2.3.1.51 Affected: 3.3.2.42 Affected: 3.4.1.1 Affected: 3.3.2.12 Affected: 2.1.1.31 Affected: 3.5.1.23 Affected: 3.3.2.53 Affected: 3.4.1.14 Affected: 3.3.2.2 Affected: 3.4.1.20 Affected: 3.3.2.35 Affected: 1.102.21 Affected: 3.3.2.5 |
|
| cisco | secure_workload |
Affected:
0 , < 3.5.1.37
(custom)
cpe:2.3:a:cisco:secure_workload:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:cisco:secure_workload:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "secure_workload",
"vendor": "cisco",
"versions": [
{
"lessThan": "3.5.1.37",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2022-20652",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-15T19:42:12.340434Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-19T16:08:33.640Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Cisco Secure Workload",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "2.2.1.41"
},
{
"status": "affected",
"version": "3.2.1.18"
},
{
"status": "affected",
"version": "3.3.2.50"
},
{
"status": "affected",
"version": "3.4.1.28"
},
{
"status": "affected",
"version": "3.4.1.34"
},
{
"status": "affected",
"version": "2.3.1.45"
},
{
"status": "affected",
"version": "2.3.1.41"
},
{
"status": "affected",
"version": "3.3.2.28"
},
{
"status": "affected",
"version": "3.1.1.59"
},
{
"status": "affected",
"version": "2.0.2.20"
},
{
"status": "affected",
"version": "2.1.1.33"
},
{
"status": "affected",
"version": "2.1.1.29"
},
{
"status": "affected",
"version": "3.2.1.28"
},
{
"status": "affected",
"version": "3.4.1.35"
},
{
"status": "affected",
"version": "3.1.1.65"
},
{
"status": "affected",
"version": "3.1.1.67"
},
{
"status": "affected",
"version": "2.0.1.34"
},
{
"status": "affected",
"version": "2.3.1.49"
},
{
"status": "affected",
"version": "2.2.1.39"
},
{
"status": "affected",
"version": "3.4.1.19"
},
{
"status": "affected",
"version": "3.3.2.23"
},
{
"status": "affected",
"version": "3.1.1.61"
},
{
"status": "affected",
"version": "3.1.1.54"
},
{
"status": "affected",
"version": "3.5.1.17"
},
{
"status": "affected",
"version": "3.3.2.33"
},
{
"status": "affected",
"version": "3.5.1.1"
},
{
"status": "affected",
"version": "2.3.1.53"
},
{
"status": "affected",
"version": "3.5.1.20"
},
{
"status": "affected",
"version": "3.5.1.30"
},
{
"status": "affected",
"version": "3.3.2.16"
},
{
"status": "affected",
"version": "3.4.1.6"
},
{
"status": "affected",
"version": "2.3.1.50"
},
{
"status": "affected",
"version": "2.3.1.52"
},
{
"status": "affected",
"version": "3.2.1.19"
},
{
"status": "affected",
"version": "2.2.1.35"
},
{
"status": "affected",
"version": "3.1.1.53"
},
{
"status": "affected",
"version": "3.1.1.70"
},
{
"status": "affected",
"version": "3.2.1.20"
},
{
"status": "affected",
"version": "3.5.1.2"
},
{
"status": "affected",
"version": "1.103.1.12"
},
{
"status": "affected",
"version": "2.3.1.51"
},
{
"status": "affected",
"version": "3.3.2.42"
},
{
"status": "affected",
"version": "3.4.1.1"
},
{
"status": "affected",
"version": "3.3.2.12"
},
{
"status": "affected",
"version": "2.1.1.31"
},
{
"status": "affected",
"version": "3.5.1.23"
},
{
"status": "affected",
"version": "3.3.2.53"
},
{
"status": "affected",
"version": "3.4.1.14"
},
{
"status": "affected",
"version": "3.3.2.2"
},
{
"status": "affected",
"version": "3.4.1.20"
},
{
"status": "affected",
"version": "3.3.2.35"
},
{
"status": "affected",
"version": "1.102.21"
},
{
"status": "affected",
"version": "3.3.2.5"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the web-based management interface and in the API subsystem of Cisco\u0026nbsp;Tetration could allow an authenticated, remote attacker to inject arbitrary commands to be executed with root-level privileges on the underlying operating system.\r\nThis vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by submitting a crafted HTTP message to the affected system. A successful exploit could allow the attacker to execute commands with root-level privileges. To exploit this vulnerability, an attacker would need valid administrator-level credentials.Cisco\u0026nbsp;has released software updates that address this vulnerability. There are no workarounds that address this vulnerability."
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco\u00a0PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-78",
"description": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-15T15:58:58.429Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-tetr-cmd-injc-skrwGO",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-tetr-cmd-injc-skrwGO"
},
{
"name": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-xss-FmbPu2pe",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-xss-FmbPu2pe"
}
],
"source": {
"advisory": "cisco-sa-tetr-cmd-injc-skrwGO",
"defects": [
"CSCvz80034"
],
"discovery": "INTERNAL"
},
"title": "Cisco Tetration Command Injection Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2022-20652",
"datePublished": "2024-11-15T15:58:58.429Z",
"dateReserved": "2021-11-02T13:28:29.036Z",
"dateUpdated": "2024-11-19T16:08:33.640Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2023-20136 (GCVE-0-2023-20136)
Vulnerability from nvd – Published: 2023-06-28 00:00 – Updated: 2024-08-02 08:57
VLAI
EPSS
VEX
Summary
A vulnerability in the OpenAPI of Cisco Secure Workload could allow an authenticated, remote attacker with the privileges of a read-only user to execute operations that should require Administrator privileges. The attacker would need valid user credentials.
This vulnerability is due to improper role-based access control (RBAC) of certain OpenAPI operations. An attacker could exploit this vulnerability by issuing a crafted OpenAPI function call with valid credentials. A successful exploit could allow the attacker to execute OpenAPI operations that are reserved for the Administrator user, including the creation and deletion of user labels.
Severity
4.3 (Medium)
CWE
- CWE-648 - Incorrect Use of Privileged APIs
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Cisco | Cisco Secure Workload |
Affected:
1.102.21
Affected: 1.103.1.12 Affected: 2.0.1.34 Affected: 2.0.2.20 Affected: 2.1.1.29 Affected: 2.1.1.31 Affected: 2.1.1.33 Affected: 2.2.1.34 Affected: 2.2.1.35 Affected: 2.2.1.39 Affected: 2.2.1.41 Affected: 2.3.1.41 Affected: 2.3.1.45 Affected: 2.3.1.49 Affected: 2.3.1.50 Affected: 2.3.1.51 Affected: 2.3.1.52 Affected: 2.3.1.53 Affected: 3.1.1.53 Affected: 3.1.1.54 Affected: 3.1.1.55 Affected: 3.1.1.59 Affected: 3.1.1.61 Affected: 3.1.1.65 Affected: 3.1.1.67 Affected: 3.1.1.70 Affected: 3.2.1.18 Affected: 3.2.1.19 Affected: 3.2.1.20 Affected: 3.2.1.28 Affected: 3.2.1.31 Affected: 3.2.1.32 Affected: 3.2.1.33 Affected: 3.3.2.12 Affected: 3.3.2.16 Affected: 3.3.2.2 Affected: 3.3.2.23 Affected: 3.3.2.28 Affected: 3.3.2.33 Affected: 3.3.2.35 Affected: 3.3.2.42 Affected: 3.3.2.5 Affected: 3.3.2.50 Affected: 3.3.2.53 Affected: 3.4.1.1 Affected: 3.4.1.14 Affected: 3.4.1.19 Affected: 3.4.1.20 Affected: 3.4.1.28 Affected: 3.4.1.34 Affected: 3.4.1.35 Affected: 3.4.1.6 Affected: 3.4.1.40 Affected: 3.5.1.1 Affected: 3.5.1.17 Affected: 3.5.1.2 Affected: 3.5.1.20 Affected: 3.5.1.23 Affected: 3.5.1.30 Affected: 3.5.1.31 Affected: 3.5.1.37 Affected: 3.6.1.17 Affected: 3.6.1.21 Affected: 3.6.1.36 Affected: 3.6.1.47 Affected: 3.6.1.5 Affected: 3.6.1.52 Affected: 3.7.1.22 Affected: 3.7.1.5 |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-02T08:57:36.064Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "cisco-sa-csw-auth-openapi-kTndjdNX",
"tags": [
"x_transferred"
],
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-csw-auth-openapi-kTndjdNX"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "Cisco Secure Workload",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "1.102.21"
},
{
"status": "affected",
"version": "1.103.1.12"
},
{
"status": "affected",
"version": "2.0.1.34"
},
{
"status": "affected",
"version": "2.0.2.20"
},
{
"status": "affected",
"version": "2.1.1.29"
},
{
"status": "affected",
"version": "2.1.1.31"
},
{
"status": "affected",
"version": "2.1.1.33"
},
{
"status": "affected",
"version": "2.2.1.34"
},
{
"status": "affected",
"version": "2.2.1.35"
},
{
"status": "affected",
"version": "2.2.1.39"
},
{
"status": "affected",
"version": "2.2.1.41"
},
{
"status": "affected",
"version": "2.3.1.41"
},
{
"status": "affected",
"version": "2.3.1.45"
},
{
"status": "affected",
"version": "2.3.1.49"
},
{
"status": "affected",
"version": "2.3.1.50"
},
{
"status": "affected",
"version": "2.3.1.51"
},
{
"status": "affected",
"version": "2.3.1.52"
},
{
"status": "affected",
"version": "2.3.1.53"
},
{
"status": "affected",
"version": "3.1.1.53"
},
{
"status": "affected",
"version": "3.1.1.54"
},
{
"status": "affected",
"version": "3.1.1.55"
},
{
"status": "affected",
"version": "3.1.1.59"
},
{
"status": "affected",
"version": "3.1.1.61"
},
{
"status": "affected",
"version": "3.1.1.65"
},
{
"status": "affected",
"version": "3.1.1.67"
},
{
"status": "affected",
"version": "3.1.1.70"
},
{
"status": "affected",
"version": "3.2.1.18"
},
{
"status": "affected",
"version": "3.2.1.19"
},
{
"status": "affected",
"version": "3.2.1.20"
},
{
"status": "affected",
"version": "3.2.1.28"
},
{
"status": "affected",
"version": "3.2.1.31"
},
{
"status": "affected",
"version": "3.2.1.32"
},
{
"status": "affected",
"version": "3.2.1.33"
},
{
"status": "affected",
"version": "3.3.2.12"
},
{
"status": "affected",
"version": "3.3.2.16"
},
{
"status": "affected",
"version": "3.3.2.2"
},
{
"status": "affected",
"version": "3.3.2.23"
},
{
"status": "affected",
"version": "3.3.2.28"
},
{
"status": "affected",
"version": "3.3.2.33"
},
{
"status": "affected",
"version": "3.3.2.35"
},
{
"status": "affected",
"version": "3.3.2.42"
},
{
"status": "affected",
"version": "3.3.2.5"
},
{
"status": "affected",
"version": "3.3.2.50"
},
{
"status": "affected",
"version": "3.3.2.53"
},
{
"status": "affected",
"version": "3.4.1.1"
},
{
"status": "affected",
"version": "3.4.1.14"
},
{
"status": "affected",
"version": "3.4.1.19"
},
{
"status": "affected",
"version": "3.4.1.20"
},
{
"status": "affected",
"version": "3.4.1.28"
},
{
"status": "affected",
"version": "3.4.1.34"
},
{
"status": "affected",
"version": "3.4.1.35"
},
{
"status": "affected",
"version": "3.4.1.6"
},
{
"status": "affected",
"version": "3.4.1.40"
},
{
"status": "affected",
"version": "3.5.1.1"
},
{
"status": "affected",
"version": "3.5.1.17"
},
{
"status": "affected",
"version": "3.5.1.2"
},
{
"status": "affected",
"version": "3.5.1.20"
},
{
"status": "affected",
"version": "3.5.1.23"
},
{
"status": "affected",
"version": "3.5.1.30"
},
{
"status": "affected",
"version": "3.5.1.31"
},
{
"status": "affected",
"version": "3.5.1.37"
},
{
"status": "affected",
"version": "3.6.1.17"
},
{
"status": "affected",
"version": "3.6.1.21"
},
{
"status": "affected",
"version": "3.6.1.36"
},
{
"status": "affected",
"version": "3.6.1.47"
},
{
"status": "affected",
"version": "3.6.1.5"
},
{
"status": "affected",
"version": "3.6.1.52"
},
{
"status": "affected",
"version": "3.7.1.22"
},
{
"status": "affected",
"version": "3.7.1.5"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the OpenAPI of Cisco Secure Workload could allow an authenticated, remote attacker with the privileges of a read-only user to execute operations that should require Administrator privileges. The attacker would need valid user credentials.\r\n\r This vulnerability is due to improper role-based access control (RBAC) of certain OpenAPI operations. An attacker could exploit this vulnerability by issuing a crafted OpenAPI function call with valid credentials. A successful exploit could allow the attacker to execute OpenAPI operations that are reserved for the Administrator user, including the creation and deletion of user labels."
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-648",
"description": "Incorrect Use of Privileged APIs",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-01-25T16:57:48.042Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-csw-auth-openapi-kTndjdNX",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-csw-auth-openapi-kTndjdNX"
}
],
"source": {
"advisory": "cisco-sa-csw-auth-openapi-kTndjdNX",
"defects": [
"CSCwe74218"
],
"discovery": "INTERNAL"
}
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2023-20136",
"datePublished": "2023-06-28T00:00:00.000Z",
"dateReserved": "2022-10-27T00:00:00.000Z",
"dateUpdated": "2024-08-02T08:57:36.064Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2021-34789 (GCVE-0-2021-34789)
Vulnerability from nvd – Published: 2021-10-21 02:50 – Updated: 2024-11-07 21:47
VLAI
EPSS
VEX
Title
Cisco Tetration Stored Cross-Site Scripting Vulnerability
Summary
A vulnerability in the web-based management interface of Cisco Tetration could allow an authenticated, remote attacker to perform a stored cross-site scripting (XSS) attack on an affected system. This vulnerability exists because the web-based management interface does not sufficiently validate user-supplied input. An attacker could exploit this vulnerability by injecting malicious code into specific pages of the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. To exploit this vulnerability, the attacker would need valid administrative credentials.
Severity
4.8 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2024-11-07 21:39 UTC
CWE
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://tools.cisco.com/security/center/content/C… | vendor-advisoryx_refsource_CISCO |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Cisco | Cisco Secure Workload |
Affected:
n/a
|
Date Public
2021-10-20 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-04T00:19:48.151Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "20211020 Cisco Tetration Stored Cross-Site Scripting Vulnerability",
"tags": [
"vendor-advisory",
"x_refsource_CISCO",
"x_transferred"
],
"url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sec-work-xss-t6SYtu8Q"
}
],
"title": "CVE Program Container"
},
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2021-34789",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-07T21:39:57.294268Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-07T21:47:00.584Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Cisco Secure Workload",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2021-10-20T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the web-based management interface of Cisco Tetration could allow an authenticated, remote attacker to perform a stored cross-site scripting (XSS) attack on an affected system. This vulnerability exists because the web-based management interface does not sufficiently validate user-supplied input. An attacker could exploit this vulnerability by injecting malicious code into specific pages of the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. To exploit this vulnerability, the attacker would need valid administrative credentials."
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-79",
"description": "CWE-79",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2021-10-21T02:50:28.000Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "20211020 Cisco Tetration Stored Cross-Site Scripting Vulnerability",
"tags": [
"vendor-advisory",
"x_refsource_CISCO"
],
"url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sec-work-xss-t6SYtu8Q"
}
],
"source": {
"advisory": "cisco-sa-sec-work-xss-t6SYtu8Q",
"defect": [
[
"CSCvz50570"
]
],
"discovery": "INTERNAL"
},
"title": "Cisco Tetration Stored Cross-Site Scripting Vulnerability",
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "psirt@cisco.com",
"DATE_PUBLIC": "2021-10-20T16:00:00",
"ID": "CVE-2021-34789",
"STATE": "PUBLIC",
"TITLE": "Cisco Tetration Stored Cross-Site Scripting Vulnerability"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Cisco Secure Workload",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "Cisco"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "A vulnerability in the web-based management interface of Cisco Tetration could allow an authenticated, remote attacker to perform a stored cross-site scripting (XSS) attack on an affected system. This vulnerability exists because the web-based management interface does not sufficiently validate user-supplied input. An attacker could exploit this vulnerability by injecting malicious code into specific pages of the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. To exploit this vulnerability, the attacker would need valid administrative credentials."
}
]
},
"exploit": [
{
"lang": "en",
"value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
}
],
"impact": {
"cvss": {
"baseScore": "4.8",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-79"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "20211020 Cisco Tetration Stored Cross-Site Scripting Vulnerability",
"refsource": "CISCO",
"url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sec-work-xss-t6SYtu8Q"
}
]
},
"source": {
"advisory": "cisco-sa-sec-work-xss-t6SYtu8Q",
"defect": [
[
"CSCvz50570"
]
],
"discovery": "INTERNAL"
}
}
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2021-34789",
"datePublished": "2021-10-21T02:50:28.278Z",
"dateReserved": "2021-06-15T00:00:00.000Z",
"dateUpdated": "2024-11-07T21:47:00.584Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2026-20319 (GCVE-0-2026-20319)
Vulnerability from cvelistv5 – Published: 2026-08-19 16:19 – Updated: 2026-08-19 19:35
VLAI
EPSS
VEX
Title
Cisco Secure Workload Software Security Hardening Release August 2026 - Buffer Management Vulnerabilities
Summary
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.
The vulnerabilities tracked by CVE-2026-20319 are related to buffer management issues that are grouped under the Common Weakness Enumeration (CWE) CWE-119.
Severity
7.5 (High)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-08-19 19:34 UTC
CWE
- CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer
Assigner
References
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Cisco | Cisco Secure Workload |
Affected:
2.2.1.41
Affected: 3.2.1.18 Affected: 3.3.2.50 Affected: 3.4.1.28 Affected: 3.4.1.34 Affected: 2.3.1.45 Affected: 2.3.1.41 Affected: 3.3.2.28 Affected: 3.1.1.59 Affected: 2.0.2.20 Affected: 2.1.1.33 Affected: 2.1.1.29 Affected: 3.2.1.28 Affected: 3.4.1.35 Affected: 3.1.1.65 Affected: 3.1.1.67 Affected: 2.0.1.34 Affected: 2.3.1.49 Affected: 2.2.1.39 Affected: 3.4.1.19 Affected: 3.3.2.23 Affected: 3.1.1.61 Affected: 3.1.1.54 Affected: 3.5.1.17 Affected: 3.3.2.33 Affected: 3.5.1.1 Affected: 2.3.1.53 Affected: 3.5.1.20 Affected: 3.5.1.30 Affected: 3.3.2.16 Affected: 3.1.1.55 Affected: 3.4.1.6 Affected: 2.3.1.50 Affected: 2.3.1.52 Affected: 3.2.1.19 Affected: 2.2.1.35 Affected: 3.1.1.53 Affected: 3.1.1.70 Affected: 3.2.1.20 Affected: 3.5.1.2 Affected: 1.103.1.12 Affected: 2.3.1.51 Affected: 3.3.2.42 Affected: 3.4.1.1 Affected: 3.3.2.12 Affected: 2.1.1.31 Affected: 3.5.1.23 Affected: 3.3.2.53 Affected: 3.4.1.14 Affected: 3.3.2.2 Affected: 3.4.1.20 Affected: 3.3.2.35 Affected: 2.2.1.34 Affected: 1.102.21 Affected: 3.3.2.5 Affected: 3.5.1.31 Affected: 3.6.1.5 Affected: 3.2.1.31 Affected: 3.5.1.37 Affected: 3.4.1.40 Affected: 3.6.1.17 Affected: 3.6.1.21 Affected: 3.2.1.32 Affected: 3.2.1.33 Affected: 3.6.1.35 Affected: 3.6.1.36 Affected: 3.7.1.5 Affected: 3.6.1.47 Affected: 3.7.1.22 Affected: 3.6.1.52 Affected: 3.7.1.39 Affected: 3.8.1.1 Affected: 3.7.1.51 Affected: 3.8.1.19 Affected: 3.8.1.36 Affected: 3.7.1.59 Affected: 3.8.1.39 Affected: 3.9.1.1 Affected: 3.9.1.10 Affected: 3.9.1.24 Affected: 3.9.1.25 Affected: 3.9.1.28 Affected: 3.9.1.38 Affected: 3.8.1.53 Affected: 3.9.1.52 Affected: 3.10.1.1 Affected: 3.9.1.64 Affected: 3.10.2.11 Affected: 3.9.1.66 Affected: 3.10.3.19 Affected: 3.9.1.69 Affected: 3.10.4.8 Affected: 3.10.5.6 Affected: 4.0.1.1 Affected: 4.0.2.4 Affected: 4.0.2.5 Affected: 3.10.6.3 Affected: 3.10.7.4 Affected: 4.0.3.13 Affected: 4.0.3.17 Affected: 3.10.8.3 |
{
"containers": {
"adp": [
{
"descriptions": [
{
"lang": "en",
"value": "The CVE Program recognizes that this CVE Record provides vulnerability information that a Supplier CNA believes is very important to consumers. The CVE Program has flagged this CVE Record as it assigns a single CVE ID to a collection of individual vulnerabilities which does not align with CVE\u0027s \"one vulnerability, one ID\" principle, and therefore provides incomplete information. For further clarification, please see the CVE Program\u0027s blog, \"Preserving Vulnerability-Level Identification\" linked below. Details within the CNA container below are viewable by clicking on the CNA name."
}
],
"providerMetadata": {
"dateUpdated": "2026-08-19T18:31:51.184Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"url": "https://www.cve.org/Media/News/item/blog/2026/06/16/Preserving-Vulnerability-Level-Identification"
}
],
"tags": [
"x_bundling-flagged-by-CVE-Program"
]
},
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-20319",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-19T19:34:22.131347Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-19T19:35:32.543Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Cisco Secure Workload",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "2.2.1.41"
},
{
"status": "affected",
"version": "3.2.1.18"
},
{
"status": "affected",
"version": "3.3.2.50"
},
{
"status": "affected",
"version": "3.4.1.28"
},
{
"status": "affected",
"version": "3.4.1.34"
},
{
"status": "affected",
"version": "2.3.1.45"
},
{
"status": "affected",
"version": "2.3.1.41"
},
{
"status": "affected",
"version": "3.3.2.28"
},
{
"status": "affected",
"version": "3.1.1.59"
},
{
"status": "affected",
"version": "2.0.2.20"
},
{
"status": "affected",
"version": "2.1.1.33"
},
{
"status": "affected",
"version": "2.1.1.29"
},
{
"status": "affected",
"version": "3.2.1.28"
},
{
"status": "affected",
"version": "3.4.1.35"
},
{
"status": "affected",
"version": "3.1.1.65"
},
{
"status": "affected",
"version": "3.1.1.67"
},
{
"status": "affected",
"version": "2.0.1.34"
},
{
"status": "affected",
"version": "2.3.1.49"
},
{
"status": "affected",
"version": "2.2.1.39"
},
{
"status": "affected",
"version": "3.4.1.19"
},
{
"status": "affected",
"version": "3.3.2.23"
},
{
"status": "affected",
"version": "3.1.1.61"
},
{
"status": "affected",
"version": "3.1.1.54"
},
{
"status": "affected",
"version": "3.5.1.17"
},
{
"status": "affected",
"version": "3.3.2.33"
},
{
"status": "affected",
"version": "3.5.1.1"
},
{
"status": "affected",
"version": "2.3.1.53"
},
{
"status": "affected",
"version": "3.5.1.20"
},
{
"status": "affected",
"version": "3.5.1.30"
},
{
"status": "affected",
"version": "3.3.2.16"
},
{
"status": "affected",
"version": "3.1.1.55"
},
{
"status": "affected",
"version": "3.4.1.6"
},
{
"status": "affected",
"version": "2.3.1.50"
},
{
"status": "affected",
"version": "2.3.1.52"
},
{
"status": "affected",
"version": "3.2.1.19"
},
{
"status": "affected",
"version": "2.2.1.35"
},
{
"status": "affected",
"version": "3.1.1.53"
},
{
"status": "affected",
"version": "3.1.1.70"
},
{
"status": "affected",
"version": "3.2.1.20"
},
{
"status": "affected",
"version": "3.5.1.2"
},
{
"status": "affected",
"version": "1.103.1.12"
},
{
"status": "affected",
"version": "2.3.1.51"
},
{
"status": "affected",
"version": "3.3.2.42"
},
{
"status": "affected",
"version": "3.4.1.1"
},
{
"status": "affected",
"version": "3.3.2.12"
},
{
"status": "affected",
"version": "2.1.1.31"
},
{
"status": "affected",
"version": "3.5.1.23"
},
{
"status": "affected",
"version": "3.3.2.53"
},
{
"status": "affected",
"version": "3.4.1.14"
},
{
"status": "affected",
"version": "3.3.2.2"
},
{
"status": "affected",
"version": "3.4.1.20"
},
{
"status": "affected",
"version": "3.3.2.35"
},
{
"status": "affected",
"version": "2.2.1.34"
},
{
"status": "affected",
"version": "1.102.21"
},
{
"status": "affected",
"version": "3.3.2.5"
},
{
"status": "affected",
"version": "3.5.1.31"
},
{
"status": "affected",
"version": "3.6.1.5"
},
{
"status": "affected",
"version": "3.2.1.31"
},
{
"status": "affected",
"version": "3.5.1.37"
},
{
"status": "affected",
"version": "3.4.1.40"
},
{
"status": "affected",
"version": "3.6.1.17"
},
{
"status": "affected",
"version": "3.6.1.21"
},
{
"status": "affected",
"version": "3.2.1.32"
},
{
"status": "affected",
"version": "3.2.1.33"
},
{
"status": "affected",
"version": "3.6.1.35"
},
{
"status": "affected",
"version": "3.6.1.36"
},
{
"status": "affected",
"version": "3.7.1.5"
},
{
"status": "affected",
"version": "3.6.1.47"
},
{
"status": "affected",
"version": "3.7.1.22"
},
{
"status": "affected",
"version": "3.6.1.52"
},
{
"status": "affected",
"version": "3.7.1.39"
},
{
"status": "affected",
"version": "3.8.1.1"
},
{
"status": "affected",
"version": "3.7.1.51"
},
{
"status": "affected",
"version": "3.8.1.19"
},
{
"status": "affected",
"version": "3.8.1.36"
},
{
"status": "affected",
"version": "3.7.1.59"
},
{
"status": "affected",
"version": "3.8.1.39"
},
{
"status": "affected",
"version": "3.9.1.1"
},
{
"status": "affected",
"version": "3.9.1.10"
},
{
"status": "affected",
"version": "3.9.1.24"
},
{
"status": "affected",
"version": "3.9.1.25"
},
{
"status": "affected",
"version": "3.9.1.28"
},
{
"status": "affected",
"version": "3.9.1.38"
},
{
"status": "affected",
"version": "3.8.1.53"
},
{
"status": "affected",
"version": "3.9.1.52"
},
{
"status": "affected",
"version": "3.10.1.1"
},
{
"status": "affected",
"version": "3.9.1.64"
},
{
"status": "affected",
"version": "3.10.2.11"
},
{
"status": "affected",
"version": "3.9.1.66"
},
{
"status": "affected",
"version": "3.10.3.19"
},
{
"status": "affected",
"version": "3.9.1.69"
},
{
"status": "affected",
"version": "3.10.4.8"
},
{
"status": "affected",
"version": "3.10.5.6"
},
{
"status": "affected",
"version": "4.0.1.1"
},
{
"status": "affected",
"version": "4.0.2.4"
},
{
"status": "affected",
"version": "4.0.2.5"
},
{
"status": "affected",
"version": "3.10.6.3"
},
{
"status": "affected",
"version": "3.10.7.4"
},
{
"status": "affected",
"version": "4.0.3.13"
},
{
"status": "affected",
"version": "4.0.3.17"
},
{
"status": "affected",
"version": "3.10.8.3"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "As part of Cisco\u0027s ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.\r\n\r\nThe vulnerabilities tracked by CVE-2026-20319 are related to buffer management issues that are grouped under the Common Weakness Enumeration (CWE) CWE-119."
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-119",
"description": "Improper Restriction of Operations within the Bounds of a Memory Buffer",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-19T16:19:44.681Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-hardening-csw1-shSvndWP",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-csw1-shSvndWP"
}
],
"source": {
"advisory": "cisco-sa-hardening-csw1-shSvndWP",
"defects": [
"CSCwu31108"
],
"discovery": "INTERNAL"
},
"title": "Cisco Secure Workload Software Security Hardening Release August 2026 - Buffer Management Vulnerabilities"
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2026-20319",
"datePublished": "2026-08-19T16:19:44.681Z",
"dateReserved": "2025-10-08T11:59:15.410Z",
"dateUpdated": "2026-08-19T19:35:32.543Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-20315 (GCVE-0-2026-20315)
Vulnerability from cvelistv5 – Published: 2026-08-19 16:19 – Updated: 2026-08-20 18:30
VLAI
EPSS
VEX
Title
Cisco Secure Workload Software Security Hardening Release August 2026 - Improper Access Control Vulnerabilities
Summary
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.
The vulnerabilities tracked by CVE-2026-20315 are related to improper access control issues that are grouped under the Common Weakness Enumeration (CWE) CWE-284.
Severity
10 (Critical)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-08-20 03:56 UTC
CWE
- CWE-284 - Improper Access Control
Assigner
References
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Cisco | Cisco Secure Workload |
Affected:
2.2.1.41
Affected: 3.2.1.18 Affected: 3.3.2.50 Affected: 3.4.1.28 Affected: 3.4.1.34 Affected: 2.3.1.45 Affected: 2.3.1.41 Affected: 3.3.2.28 Affected: 3.1.1.59 Affected: 2.0.2.20 Affected: 2.1.1.33 Affected: 2.1.1.29 Affected: 3.2.1.28 Affected: 3.4.1.35 Affected: 3.1.1.65 Affected: 3.1.1.67 Affected: 2.0.1.34 Affected: 2.3.1.49 Affected: 2.2.1.39 Affected: 3.4.1.19 Affected: 3.3.2.23 Affected: 3.1.1.61 Affected: 3.1.1.54 Affected: 3.5.1.17 Affected: 3.3.2.33 Affected: 3.5.1.1 Affected: 2.3.1.53 Affected: 3.5.1.20 Affected: 3.5.1.30 Affected: 3.3.2.16 Affected: 3.1.1.55 Affected: 3.4.1.6 Affected: 2.3.1.50 Affected: 2.3.1.52 Affected: 3.2.1.19 Affected: 2.2.1.35 Affected: 3.1.1.53 Affected: 3.1.1.70 Affected: 3.2.1.20 Affected: 3.5.1.2 Affected: 1.103.1.12 Affected: 2.3.1.51 Affected: 3.3.2.42 Affected: 3.4.1.1 Affected: 3.3.2.12 Affected: 2.1.1.31 Affected: 3.5.1.23 Affected: 3.3.2.53 Affected: 3.4.1.14 Affected: 3.3.2.2 Affected: 3.4.1.20 Affected: 3.3.2.35 Affected: 2.2.1.34 Affected: 1.102.21 Affected: 3.3.2.5 Affected: 3.5.1.31 Affected: 3.6.1.5 Affected: 3.2.1.31 Affected: 3.5.1.37 Affected: 3.4.1.40 Affected: 3.6.1.17 Affected: 3.6.1.21 Affected: 3.2.1.32 Affected: 3.2.1.33 Affected: 3.6.1.35 Affected: 3.6.1.36 Affected: 3.7.1.5 Affected: 3.6.1.47 Affected: 3.7.1.22 Affected: 3.6.1.52 Affected: 3.7.1.39 Affected: 3.8.1.1 Affected: 3.7.1.51 Affected: 3.8.1.19 Affected: 3.8.1.36 Affected: 3.7.1.59 Affected: 3.8.1.39 Affected: 3.9.1.1 Affected: 3.9.1.10 Affected: 3.9.1.24 Affected: 3.9.1.25 Affected: 3.9.1.28 Affected: 3.9.1.38 Affected: 3.8.1.53 Affected: 3.9.1.52 Affected: 3.10.1.1 Affected: 3.9.1.64 Affected: 3.10.2.11 Affected: 3.9.1.66 Affected: 3.10.3.19 Affected: 3.9.1.69 Affected: 3.10.4.8 Affected: 3.10.5.6 Affected: 4.0.1.1 Affected: 4.0.2.4 Affected: 4.0.2.5 Affected: 3.10.6.3 Affected: 3.10.7.4 Affected: 4.0.3.13 Affected: 4.0.3.17 Affected: 3.10.8.3 |
{
"containers": {
"adp": [
{
"descriptions": [
{
"lang": "en",
"value": "The CVE Program recognizes that this CVE Record provides vulnerability information that a Supplier CNA believes is very important to consumers. The CVE Program has flagged this CVE Record as it assigns a single CVE ID to a collection of individual vulnerabilities which does not align with CVE\u0027s \"one vulnerability, one ID\" principle, and therefore provides incomplete information. For further clarification, please see the CVE Program\u0027s blog, \"Preserving Vulnerability-Level Identification\" linked below. Details within the CNA container below are viewable by clicking on the CNA name."
}
],
"providerMetadata": {
"dateUpdated": "2026-08-19T18:31:50.867Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"url": "https://www.cve.org/Media/News/item/blog/2026/06/16/Preserving-Vulnerability-Level-Identification"
}
],
"tags": [
"x_bundling-flagged-by-CVE-Program"
]
},
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-20315",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-20T03:56:21.828713Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-20T18:30:20.497Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Cisco Secure Workload",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "2.2.1.41"
},
{
"status": "affected",
"version": "3.2.1.18"
},
{
"status": "affected",
"version": "3.3.2.50"
},
{
"status": "affected",
"version": "3.4.1.28"
},
{
"status": "affected",
"version": "3.4.1.34"
},
{
"status": "affected",
"version": "2.3.1.45"
},
{
"status": "affected",
"version": "2.3.1.41"
},
{
"status": "affected",
"version": "3.3.2.28"
},
{
"status": "affected",
"version": "3.1.1.59"
},
{
"status": "affected",
"version": "2.0.2.20"
},
{
"status": "affected",
"version": "2.1.1.33"
},
{
"status": "affected",
"version": "2.1.1.29"
},
{
"status": "affected",
"version": "3.2.1.28"
},
{
"status": "affected",
"version": "3.4.1.35"
},
{
"status": "affected",
"version": "3.1.1.65"
},
{
"status": "affected",
"version": "3.1.1.67"
},
{
"status": "affected",
"version": "2.0.1.34"
},
{
"status": "affected",
"version": "2.3.1.49"
},
{
"status": "affected",
"version": "2.2.1.39"
},
{
"status": "affected",
"version": "3.4.1.19"
},
{
"status": "affected",
"version": "3.3.2.23"
},
{
"status": "affected",
"version": "3.1.1.61"
},
{
"status": "affected",
"version": "3.1.1.54"
},
{
"status": "affected",
"version": "3.5.1.17"
},
{
"status": "affected",
"version": "3.3.2.33"
},
{
"status": "affected",
"version": "3.5.1.1"
},
{
"status": "affected",
"version": "2.3.1.53"
},
{
"status": "affected",
"version": "3.5.1.20"
},
{
"status": "affected",
"version": "3.5.1.30"
},
{
"status": "affected",
"version": "3.3.2.16"
},
{
"status": "affected",
"version": "3.1.1.55"
},
{
"status": "affected",
"version": "3.4.1.6"
},
{
"status": "affected",
"version": "2.3.1.50"
},
{
"status": "affected",
"version": "2.3.1.52"
},
{
"status": "affected",
"version": "3.2.1.19"
},
{
"status": "affected",
"version": "2.2.1.35"
},
{
"status": "affected",
"version": "3.1.1.53"
},
{
"status": "affected",
"version": "3.1.1.70"
},
{
"status": "affected",
"version": "3.2.1.20"
},
{
"status": "affected",
"version": "3.5.1.2"
},
{
"status": "affected",
"version": "1.103.1.12"
},
{
"status": "affected",
"version": "2.3.1.51"
},
{
"status": "affected",
"version": "3.3.2.42"
},
{
"status": "affected",
"version": "3.4.1.1"
},
{
"status": "affected",
"version": "3.3.2.12"
},
{
"status": "affected",
"version": "2.1.1.31"
},
{
"status": "affected",
"version": "3.5.1.23"
},
{
"status": "affected",
"version": "3.3.2.53"
},
{
"status": "affected",
"version": "3.4.1.14"
},
{
"status": "affected",
"version": "3.3.2.2"
},
{
"status": "affected",
"version": "3.4.1.20"
},
{
"status": "affected",
"version": "3.3.2.35"
},
{
"status": "affected",
"version": "2.2.1.34"
},
{
"status": "affected",
"version": "1.102.21"
},
{
"status": "affected",
"version": "3.3.2.5"
},
{
"status": "affected",
"version": "3.5.1.31"
},
{
"status": "affected",
"version": "3.6.1.5"
},
{
"status": "affected",
"version": "3.2.1.31"
},
{
"status": "affected",
"version": "3.5.1.37"
},
{
"status": "affected",
"version": "3.4.1.40"
},
{
"status": "affected",
"version": "3.6.1.17"
},
{
"status": "affected",
"version": "3.6.1.21"
},
{
"status": "affected",
"version": "3.2.1.32"
},
{
"status": "affected",
"version": "3.2.1.33"
},
{
"status": "affected",
"version": "3.6.1.35"
},
{
"status": "affected",
"version": "3.6.1.36"
},
{
"status": "affected",
"version": "3.7.1.5"
},
{
"status": "affected",
"version": "3.6.1.47"
},
{
"status": "affected",
"version": "3.7.1.22"
},
{
"status": "affected",
"version": "3.6.1.52"
},
{
"status": "affected",
"version": "3.7.1.39"
},
{
"status": "affected",
"version": "3.8.1.1"
},
{
"status": "affected",
"version": "3.7.1.51"
},
{
"status": "affected",
"version": "3.8.1.19"
},
{
"status": "affected",
"version": "3.8.1.36"
},
{
"status": "affected",
"version": "3.7.1.59"
},
{
"status": "affected",
"version": "3.8.1.39"
},
{
"status": "affected",
"version": "3.9.1.1"
},
{
"status": "affected",
"version": "3.9.1.10"
},
{
"status": "affected",
"version": "3.9.1.24"
},
{
"status": "affected",
"version": "3.9.1.25"
},
{
"status": "affected",
"version": "3.9.1.28"
},
{
"status": "affected",
"version": "3.9.1.38"
},
{
"status": "affected",
"version": "3.8.1.53"
},
{
"status": "affected",
"version": "3.9.1.52"
},
{
"status": "affected",
"version": "3.10.1.1"
},
{
"status": "affected",
"version": "3.9.1.64"
},
{
"status": "affected",
"version": "3.10.2.11"
},
{
"status": "affected",
"version": "3.9.1.66"
},
{
"status": "affected",
"version": "3.10.3.19"
},
{
"status": "affected",
"version": "3.9.1.69"
},
{
"status": "affected",
"version": "3.10.4.8"
},
{
"status": "affected",
"version": "3.10.5.6"
},
{
"status": "affected",
"version": "4.0.1.1"
},
{
"status": "affected",
"version": "4.0.2.4"
},
{
"status": "affected",
"version": "4.0.2.5"
},
{
"status": "affected",
"version": "3.10.6.3"
},
{
"status": "affected",
"version": "3.10.7.4"
},
{
"status": "affected",
"version": "4.0.3.13"
},
{
"status": "affected",
"version": "4.0.3.17"
},
{
"status": "affected",
"version": "3.10.8.3"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "As part of Cisco\u0027s ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.\r\n\r\nThe vulnerabilities tracked by CVE-2026-20315 are related to improper access control issues that are grouped under the Common Weakness Enumeration (CWE) CWE-284."
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 10,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-284",
"description": "Improper Access Control",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-19T16:19:36.686Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-hardening-csw1-shSvndWP",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-csw1-shSvndWP"
}
],
"source": {
"advisory": "cisco-sa-hardening-csw1-shSvndWP",
"defects": [
"CSCwu61354"
],
"discovery": "INTERNAL"
},
"title": "Cisco Secure Workload Software Security Hardening Release August 2026 - Improper Access Control Vulnerabilities"
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2026-20315",
"datePublished": "2026-08-19T16:19:36.686Z",
"dateReserved": "2025-10-08T11:59:15.410Z",
"dateUpdated": "2026-08-20T18:30:20.497Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-20317 (GCVE-0-2026-20317)
Vulnerability from cvelistv5 – Published: 2026-08-19 16:19 – Updated: 2026-08-20 15:57
VLAI
EPSS
VEX
Title
Cisco Secure Workload Software Security Hardening Release August 2026 - Improper Authentication Vulnerabilities
Summary
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.
The vulnerabilities tracked by CVE-2026-20317 are related to improper authentication issues that are grouped under the Common Weakness Enumeration (CWE) CWE-287.
Severity
10 (Critical)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-08-20 15:40 UTC
CWE
- CWE-287 - Improper Authentication
Assigner
References
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Cisco | Cisco Secure Workload |
Affected:
2.2.1.41
Affected: 3.2.1.18 Affected: 3.3.2.50 Affected: 3.4.1.28 Affected: 3.4.1.34 Affected: 2.3.1.45 Affected: 2.3.1.41 Affected: 3.3.2.28 Affected: 3.1.1.59 Affected: 2.0.2.20 Affected: 2.1.1.33 Affected: 2.1.1.29 Affected: 3.2.1.28 Affected: 3.4.1.35 Affected: 3.1.1.65 Affected: 3.1.1.67 Affected: 2.0.1.34 Affected: 2.3.1.49 Affected: 2.2.1.39 Affected: 3.4.1.19 Affected: 3.3.2.23 Affected: 3.1.1.61 Affected: 3.1.1.54 Affected: 3.5.1.17 Affected: 3.3.2.33 Affected: 3.5.1.1 Affected: 2.3.1.53 Affected: 3.5.1.20 Affected: 3.5.1.30 Affected: 3.3.2.16 Affected: 3.1.1.55 Affected: 3.4.1.6 Affected: 2.3.1.50 Affected: 2.3.1.52 Affected: 3.2.1.19 Affected: 2.2.1.35 Affected: 3.1.1.53 Affected: 3.1.1.70 Affected: 3.2.1.20 Affected: 3.5.1.2 Affected: 1.103.1.12 Affected: 2.3.1.51 Affected: 3.3.2.42 Affected: 3.4.1.1 Affected: 3.3.2.12 Affected: 2.1.1.31 Affected: 3.5.1.23 Affected: 3.3.2.53 Affected: 3.4.1.14 Affected: 3.3.2.2 Affected: 3.4.1.20 Affected: 3.3.2.35 Affected: 2.2.1.34 Affected: 1.102.21 Affected: 3.3.2.5 Affected: 3.5.1.31 Affected: 3.6.1.5 Affected: 3.2.1.31 Affected: 3.5.1.37 Affected: 3.4.1.40 Affected: 3.6.1.17 Affected: 3.6.1.21 Affected: 3.2.1.32 Affected: 3.2.1.33 Affected: 3.6.1.35 Affected: 3.6.1.36 Affected: 3.7.1.5 Affected: 3.6.1.47 Affected: 3.7.1.22 Affected: 3.6.1.52 Affected: 3.7.1.39 Affected: 3.8.1.1 Affected: 3.7.1.51 Affected: 3.8.1.19 Affected: 3.8.1.36 Affected: 3.7.1.59 Affected: 3.8.1.39 Affected: 3.9.1.1 Affected: 3.9.1.10 Affected: 3.9.1.24 Affected: 3.9.1.25 Affected: 3.9.1.28 Affected: 3.9.1.38 Affected: 3.8.1.53 Affected: 3.9.1.52 Affected: 3.10.1.1 Affected: 3.9.1.64 Affected: 3.10.2.11 Affected: 3.9.1.66 Affected: 3.10.3.19 Affected: 3.9.1.69 Affected: 3.10.4.8 Affected: 3.10.5.6 Affected: 4.0.1.1 Affected: 4.0.2.4 Affected: 4.0.2.5 Affected: 3.10.6.3 Affected: 3.10.7.4 Affected: 4.0.3.13 Affected: 4.0.3.17 Affected: 3.10.8.3 |
{
"containers": {
"adp": [
{
"descriptions": [
{
"lang": "en",
"value": "The CVE Program recognizes that this CVE Record provides vulnerability information that a Supplier CNA believes is very important to consumers. The CVE Program has flagged this CVE Record as it assigns a single CVE ID to a collection of individual vulnerabilities which does not align with CVE\u0027s \"one vulnerability, one ID\" principle, and therefore provides incomplete information. For further clarification, please see the CVE Program\u0027s blog, \"Preserving Vulnerability-Level Identification\" linked below. Details within the CNA container below are viewable by clicking on the CNA name."
}
],
"providerMetadata": {
"dateUpdated": "2026-08-19T18:31:50.971Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"url": "https://www.cve.org/Media/News/item/blog/2026/06/16/Preserving-Vulnerability-Level-Identification"
}
],
"tags": [
"x_bundling-flagged-by-CVE-Program"
]
},
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-20317",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-20T15:40:41.775734Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-20T15:57:08.173Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Cisco Secure Workload",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "2.2.1.41"
},
{
"status": "affected",
"version": "3.2.1.18"
},
{
"status": "affected",
"version": "3.3.2.50"
},
{
"status": "affected",
"version": "3.4.1.28"
},
{
"status": "affected",
"version": "3.4.1.34"
},
{
"status": "affected",
"version": "2.3.1.45"
},
{
"status": "affected",
"version": "2.3.1.41"
},
{
"status": "affected",
"version": "3.3.2.28"
},
{
"status": "affected",
"version": "3.1.1.59"
},
{
"status": "affected",
"version": "2.0.2.20"
},
{
"status": "affected",
"version": "2.1.1.33"
},
{
"status": "affected",
"version": "2.1.1.29"
},
{
"status": "affected",
"version": "3.2.1.28"
},
{
"status": "affected",
"version": "3.4.1.35"
},
{
"status": "affected",
"version": "3.1.1.65"
},
{
"status": "affected",
"version": "3.1.1.67"
},
{
"status": "affected",
"version": "2.0.1.34"
},
{
"status": "affected",
"version": "2.3.1.49"
},
{
"status": "affected",
"version": "2.2.1.39"
},
{
"status": "affected",
"version": "3.4.1.19"
},
{
"status": "affected",
"version": "3.3.2.23"
},
{
"status": "affected",
"version": "3.1.1.61"
},
{
"status": "affected",
"version": "3.1.1.54"
},
{
"status": "affected",
"version": "3.5.1.17"
},
{
"status": "affected",
"version": "3.3.2.33"
},
{
"status": "affected",
"version": "3.5.1.1"
},
{
"status": "affected",
"version": "2.3.1.53"
},
{
"status": "affected",
"version": "3.5.1.20"
},
{
"status": "affected",
"version": "3.5.1.30"
},
{
"status": "affected",
"version": "3.3.2.16"
},
{
"status": "affected",
"version": "3.1.1.55"
},
{
"status": "affected",
"version": "3.4.1.6"
},
{
"status": "affected",
"version": "2.3.1.50"
},
{
"status": "affected",
"version": "2.3.1.52"
},
{
"status": "affected",
"version": "3.2.1.19"
},
{
"status": "affected",
"version": "2.2.1.35"
},
{
"status": "affected",
"version": "3.1.1.53"
},
{
"status": "affected",
"version": "3.1.1.70"
},
{
"status": "affected",
"version": "3.2.1.20"
},
{
"status": "affected",
"version": "3.5.1.2"
},
{
"status": "affected",
"version": "1.103.1.12"
},
{
"status": "affected",
"version": "2.3.1.51"
},
{
"status": "affected",
"version": "3.3.2.42"
},
{
"status": "affected",
"version": "3.4.1.1"
},
{
"status": "affected",
"version": "3.3.2.12"
},
{
"status": "affected",
"version": "2.1.1.31"
},
{
"status": "affected",
"version": "3.5.1.23"
},
{
"status": "affected",
"version": "3.3.2.53"
},
{
"status": "affected",
"version": "3.4.1.14"
},
{
"status": "affected",
"version": "3.3.2.2"
},
{
"status": "affected",
"version": "3.4.1.20"
},
{
"status": "affected",
"version": "3.3.2.35"
},
{
"status": "affected",
"version": "2.2.1.34"
},
{
"status": "affected",
"version": "1.102.21"
},
{
"status": "affected",
"version": "3.3.2.5"
},
{
"status": "affected",
"version": "3.5.1.31"
},
{
"status": "affected",
"version": "3.6.1.5"
},
{
"status": "affected",
"version": "3.2.1.31"
},
{
"status": "affected",
"version": "3.5.1.37"
},
{
"status": "affected",
"version": "3.4.1.40"
},
{
"status": "affected",
"version": "3.6.1.17"
},
{
"status": "affected",
"version": "3.6.1.21"
},
{
"status": "affected",
"version": "3.2.1.32"
},
{
"status": "affected",
"version": "3.2.1.33"
},
{
"status": "affected",
"version": "3.6.1.35"
},
{
"status": "affected",
"version": "3.6.1.36"
},
{
"status": "affected",
"version": "3.7.1.5"
},
{
"status": "affected",
"version": "3.6.1.47"
},
{
"status": "affected",
"version": "3.7.1.22"
},
{
"status": "affected",
"version": "3.6.1.52"
},
{
"status": "affected",
"version": "3.7.1.39"
},
{
"status": "affected",
"version": "3.8.1.1"
},
{
"status": "affected",
"version": "3.7.1.51"
},
{
"status": "affected",
"version": "3.8.1.19"
},
{
"status": "affected",
"version": "3.8.1.36"
},
{
"status": "affected",
"version": "3.7.1.59"
},
{
"status": "affected",
"version": "3.8.1.39"
},
{
"status": "affected",
"version": "3.9.1.1"
},
{
"status": "affected",
"version": "3.9.1.10"
},
{
"status": "affected",
"version": "3.9.1.24"
},
{
"status": "affected",
"version": "3.9.1.25"
},
{
"status": "affected",
"version": "3.9.1.28"
},
{
"status": "affected",
"version": "3.9.1.38"
},
{
"status": "affected",
"version": "3.8.1.53"
},
{
"status": "affected",
"version": "3.9.1.52"
},
{
"status": "affected",
"version": "3.10.1.1"
},
{
"status": "affected",
"version": "3.9.1.64"
},
{
"status": "affected",
"version": "3.10.2.11"
},
{
"status": "affected",
"version": "3.9.1.66"
},
{
"status": "affected",
"version": "3.10.3.19"
},
{
"status": "affected",
"version": "3.9.1.69"
},
{
"status": "affected",
"version": "3.10.4.8"
},
{
"status": "affected",
"version": "3.10.5.6"
},
{
"status": "affected",
"version": "4.0.1.1"
},
{
"status": "affected",
"version": "4.0.2.4"
},
{
"status": "affected",
"version": "4.0.2.5"
},
{
"status": "affected",
"version": "3.10.6.3"
},
{
"status": "affected",
"version": "3.10.7.4"
},
{
"status": "affected",
"version": "4.0.3.13"
},
{
"status": "affected",
"version": "4.0.3.17"
},
{
"status": "affected",
"version": "3.10.8.3"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "As part of Cisco\u0027s ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.\r\n\r\nThe vulnerabilities tracked by CVE-2026-20317 are related to improper authentication issues that are grouped under the Common Weakness Enumeration (CWE) CWE-287."
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 10,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-287",
"description": "Improper Authentication",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-19T16:19:28.234Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-hardening-csw1-shSvndWP",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-csw1-shSvndWP"
}
],
"source": {
"advisory": "cisco-sa-hardening-csw1-shSvndWP",
"defects": [
"CSCwu12926"
],
"discovery": "INTERNAL"
},
"title": "Cisco Secure Workload Software Security Hardening Release August 2026 - Improper Authentication Vulnerabilities"
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2026-20317",
"datePublished": "2026-08-19T16:19:28.234Z",
"dateReserved": "2025-10-08T11:59:15.410Z",
"dateUpdated": "2026-08-20T15:57:08.173Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-20318 (GCVE-0-2026-20318)
Vulnerability from cvelistv5 – Published: 2026-08-19 16:19 – Updated: 2026-08-20 15:57
VLAI
EPSS
VEX
Title
Cisco Secure Workload Software Security Hardening Release August 2026 - Improper Input Validation Vulnerabilities
Summary
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.
The vulnerabilities tracked by CVE-2026-20318 are related to improper input validation issues that are grouped under the Common Weakness Enumeration (CWE) CWE-20.
Severity
9.6 (Critical)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-08-20 15:40 UTC
CWE
- CWE-20 - Improper Input Validation
Assigner
References
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Cisco | Cisco Secure Workload |
Affected:
2.2.1.41
Affected: 3.2.1.18 Affected: 3.3.2.50 Affected: 3.4.1.28 Affected: 3.4.1.34 Affected: 2.3.1.45 Affected: 2.3.1.41 Affected: 3.3.2.28 Affected: 3.1.1.59 Affected: 2.0.2.20 Affected: 2.1.1.33 Affected: 2.1.1.29 Affected: 3.2.1.28 Affected: 3.4.1.35 Affected: 3.1.1.65 Affected: 3.1.1.67 Affected: 2.0.1.34 Affected: 2.3.1.49 Affected: 2.2.1.39 Affected: 3.4.1.19 Affected: 3.3.2.23 Affected: 3.1.1.61 Affected: 3.1.1.54 Affected: 3.5.1.17 Affected: 3.3.2.33 Affected: 3.5.1.1 Affected: 2.3.1.53 Affected: 3.5.1.20 Affected: 3.5.1.30 Affected: 3.3.2.16 Affected: 3.1.1.55 Affected: 3.4.1.6 Affected: 2.3.1.50 Affected: 2.3.1.52 Affected: 3.2.1.19 Affected: 2.2.1.35 Affected: 3.1.1.53 Affected: 3.1.1.70 Affected: 3.2.1.20 Affected: 3.5.1.2 Affected: 1.103.1.12 Affected: 2.3.1.51 Affected: 3.3.2.42 Affected: 3.4.1.1 Affected: 3.3.2.12 Affected: 2.1.1.31 Affected: 3.5.1.23 Affected: 3.3.2.53 Affected: 3.4.1.14 Affected: 3.3.2.2 Affected: 3.4.1.20 Affected: 3.3.2.35 Affected: 2.2.1.34 Affected: 1.102.21 Affected: 3.3.2.5 Affected: 3.5.1.31 Affected: 3.6.1.5 Affected: 3.2.1.31 Affected: 3.5.1.37 Affected: 3.4.1.40 Affected: 3.6.1.17 Affected: 3.6.1.21 Affected: 3.2.1.32 Affected: 3.2.1.33 Affected: 3.6.1.35 Affected: 3.6.1.36 Affected: 3.7.1.5 Affected: 3.6.1.47 Affected: 3.7.1.22 Affected: 3.6.1.52 Affected: 3.7.1.39 Affected: 3.8.1.1 Affected: 3.7.1.51 Affected: 3.8.1.19 Affected: 3.8.1.36 Affected: 3.7.1.59 Affected: 3.8.1.39 Affected: 3.9.1.1 Affected: 3.9.1.10 Affected: 3.9.1.24 Affected: 3.9.1.25 Affected: 3.9.1.28 Affected: 3.9.1.38 Affected: 3.8.1.53 Affected: 3.9.1.52 Affected: 3.10.1.1 Affected: 3.9.1.64 Affected: 3.10.2.11 Affected: 3.9.1.66 Affected: 3.10.3.19 Affected: 3.9.1.69 Affected: 3.10.4.8 Affected: 3.10.5.6 Affected: 4.0.1.1 Affected: 4.0.2.4 Affected: 4.0.2.5 Affected: 3.10.6.3 Affected: 3.10.7.4 Affected: 4.0.3.13 Affected: 4.0.3.17 Affected: 3.10.8.3 |
{
"containers": {
"adp": [
{
"descriptions": [
{
"lang": "en",
"value": "The CVE Program recognizes that this CVE Record provides vulnerability information that a Supplier CNA believes is very important to consumers. The CVE Program has flagged this CVE Record as it assigns a single CVE ID to a collection of individual vulnerabilities which does not align with CVE\u0027s \"one vulnerability, one ID\" principle, and therefore provides incomplete information. For further clarification, please see the CVE Program\u0027s blog, \"Preserving Vulnerability-Level Identification\" linked below. Details within the CNA container below are viewable by clicking on the CNA name."
}
],
"providerMetadata": {
"dateUpdated": "2026-08-19T18:31:51.073Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"url": "https://www.cve.org/Media/News/item/blog/2026/06/16/Preserving-Vulnerability-Level-Identification"
}
],
"tags": [
"x_bundling-flagged-by-CVE-Program"
]
},
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-20318",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-20T15:40:33.282455Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-20T15:57:08.326Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Cisco Secure Workload",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "2.2.1.41"
},
{
"status": "affected",
"version": "3.2.1.18"
},
{
"status": "affected",
"version": "3.3.2.50"
},
{
"status": "affected",
"version": "3.4.1.28"
},
{
"status": "affected",
"version": "3.4.1.34"
},
{
"status": "affected",
"version": "2.3.1.45"
},
{
"status": "affected",
"version": "2.3.1.41"
},
{
"status": "affected",
"version": "3.3.2.28"
},
{
"status": "affected",
"version": "3.1.1.59"
},
{
"status": "affected",
"version": "2.0.2.20"
},
{
"status": "affected",
"version": "2.1.1.33"
},
{
"status": "affected",
"version": "2.1.1.29"
},
{
"status": "affected",
"version": "3.2.1.28"
},
{
"status": "affected",
"version": "3.4.1.35"
},
{
"status": "affected",
"version": "3.1.1.65"
},
{
"status": "affected",
"version": "3.1.1.67"
},
{
"status": "affected",
"version": "2.0.1.34"
},
{
"status": "affected",
"version": "2.3.1.49"
},
{
"status": "affected",
"version": "2.2.1.39"
},
{
"status": "affected",
"version": "3.4.1.19"
},
{
"status": "affected",
"version": "3.3.2.23"
},
{
"status": "affected",
"version": "3.1.1.61"
},
{
"status": "affected",
"version": "3.1.1.54"
},
{
"status": "affected",
"version": "3.5.1.17"
},
{
"status": "affected",
"version": "3.3.2.33"
},
{
"status": "affected",
"version": "3.5.1.1"
},
{
"status": "affected",
"version": "2.3.1.53"
},
{
"status": "affected",
"version": "3.5.1.20"
},
{
"status": "affected",
"version": "3.5.1.30"
},
{
"status": "affected",
"version": "3.3.2.16"
},
{
"status": "affected",
"version": "3.1.1.55"
},
{
"status": "affected",
"version": "3.4.1.6"
},
{
"status": "affected",
"version": "2.3.1.50"
},
{
"status": "affected",
"version": "2.3.1.52"
},
{
"status": "affected",
"version": "3.2.1.19"
},
{
"status": "affected",
"version": "2.2.1.35"
},
{
"status": "affected",
"version": "3.1.1.53"
},
{
"status": "affected",
"version": "3.1.1.70"
},
{
"status": "affected",
"version": "3.2.1.20"
},
{
"status": "affected",
"version": "3.5.1.2"
},
{
"status": "affected",
"version": "1.103.1.12"
},
{
"status": "affected",
"version": "2.3.1.51"
},
{
"status": "affected",
"version": "3.3.2.42"
},
{
"status": "affected",
"version": "3.4.1.1"
},
{
"status": "affected",
"version": "3.3.2.12"
},
{
"status": "affected",
"version": "2.1.1.31"
},
{
"status": "affected",
"version": "3.5.1.23"
},
{
"status": "affected",
"version": "3.3.2.53"
},
{
"status": "affected",
"version": "3.4.1.14"
},
{
"status": "affected",
"version": "3.3.2.2"
},
{
"status": "affected",
"version": "3.4.1.20"
},
{
"status": "affected",
"version": "3.3.2.35"
},
{
"status": "affected",
"version": "2.2.1.34"
},
{
"status": "affected",
"version": "1.102.21"
},
{
"status": "affected",
"version": "3.3.2.5"
},
{
"status": "affected",
"version": "3.5.1.31"
},
{
"status": "affected",
"version": "3.6.1.5"
},
{
"status": "affected",
"version": "3.2.1.31"
},
{
"status": "affected",
"version": "3.5.1.37"
},
{
"status": "affected",
"version": "3.4.1.40"
},
{
"status": "affected",
"version": "3.6.1.17"
},
{
"status": "affected",
"version": "3.6.1.21"
},
{
"status": "affected",
"version": "3.2.1.32"
},
{
"status": "affected",
"version": "3.2.1.33"
},
{
"status": "affected",
"version": "3.6.1.35"
},
{
"status": "affected",
"version": "3.6.1.36"
},
{
"status": "affected",
"version": "3.7.1.5"
},
{
"status": "affected",
"version": "3.6.1.47"
},
{
"status": "affected",
"version": "3.7.1.22"
},
{
"status": "affected",
"version": "3.6.1.52"
},
{
"status": "affected",
"version": "3.7.1.39"
},
{
"status": "affected",
"version": "3.8.1.1"
},
{
"status": "affected",
"version": "3.7.1.51"
},
{
"status": "affected",
"version": "3.8.1.19"
},
{
"status": "affected",
"version": "3.8.1.36"
},
{
"status": "affected",
"version": "3.7.1.59"
},
{
"status": "affected",
"version": "3.8.1.39"
},
{
"status": "affected",
"version": "3.9.1.1"
},
{
"status": "affected",
"version": "3.9.1.10"
},
{
"status": "affected",
"version": "3.9.1.24"
},
{
"status": "affected",
"version": "3.9.1.25"
},
{
"status": "affected",
"version": "3.9.1.28"
},
{
"status": "affected",
"version": "3.9.1.38"
},
{
"status": "affected",
"version": "3.8.1.53"
},
{
"status": "affected",
"version": "3.9.1.52"
},
{
"status": "affected",
"version": "3.10.1.1"
},
{
"status": "affected",
"version": "3.9.1.64"
},
{
"status": "affected",
"version": "3.10.2.11"
},
{
"status": "affected",
"version": "3.9.1.66"
},
{
"status": "affected",
"version": "3.10.3.19"
},
{
"status": "affected",
"version": "3.9.1.69"
},
{
"status": "affected",
"version": "3.10.4.8"
},
{
"status": "affected",
"version": "3.10.5.6"
},
{
"status": "affected",
"version": "4.0.1.1"
},
{
"status": "affected",
"version": "4.0.2.4"
},
{
"status": "affected",
"version": "4.0.2.5"
},
{
"status": "affected",
"version": "3.10.6.3"
},
{
"status": "affected",
"version": "3.10.7.4"
},
{
"status": "affected",
"version": "4.0.3.13"
},
{
"status": "affected",
"version": "4.0.3.17"
},
{
"status": "affected",
"version": "3.10.8.3"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "As part of Cisco\u0027s ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.\r\n\r\nThe vulnerabilities tracked by CVE-2026-20318 are related to improper input validation issues that are grouped under the Common Weakness Enumeration (CWE) CWE-20."
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-20",
"description": "Improper Input Validation",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-19T16:19:24.093Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-hardening-csw1-shSvndWP",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-csw1-shSvndWP"
}
],
"source": {
"advisory": "cisco-sa-hardening-csw1-shSvndWP",
"defects": [
"CSCwu29742"
],
"discovery": "INTERNAL"
},
"title": "Cisco Secure Workload Software Security Hardening Release August 2026 - Improper Input Validation Vulnerabilities"
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2026-20318",
"datePublished": "2026-08-19T16:19:24.093Z",
"dateReserved": "2025-10-08T11:59:15.410Z",
"dateUpdated": "2026-08-20T15:57:08.326Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-20231 (GCVE-0-2026-20231)
Vulnerability from cvelistv5 – Published: 2026-08-19 16:16 – Updated: 2026-08-20 18:28
VLAI
EPSS
VEX
Title
Cisco Secure Workload Software Security Hardening Release August 2026 - Improper Neutralization of Special Elements Vulnerabilities
Summary
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.
The vulnerabilities tracked by CVE-2026-20231 are related to improper neutralization of special elements issues that are grouped under the Common Weakness Enumeration (CWE) CWE-74.
Severity
9.9 (Critical)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-08-20 03:57 UTC
CWE
- CWE-74 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
Assigner
References
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Cisco | Cisco Secure Workload |
Affected:
2.2.1.41
Affected: 3.2.1.18 Affected: 3.3.2.50 Affected: 3.4.1.28 Affected: 3.4.1.34 Affected: 2.3.1.45 Affected: 2.3.1.41 Affected: 3.3.2.28 Affected: 3.1.1.59 Affected: 2.0.2.20 Affected: 2.1.1.33 Affected: 2.1.1.29 Affected: 3.2.1.28 Affected: 3.4.1.35 Affected: 3.1.1.65 Affected: 3.1.1.67 Affected: 2.0.1.34 Affected: 2.3.1.49 Affected: 2.2.1.39 Affected: 3.4.1.19 Affected: 3.3.2.23 Affected: 3.1.1.61 Affected: 3.1.1.54 Affected: 3.5.1.17 Affected: 3.3.2.33 Affected: 3.5.1.1 Affected: 2.3.1.53 Affected: 3.5.1.20 Affected: 3.5.1.30 Affected: 3.3.2.16 Affected: 3.1.1.55 Affected: 3.4.1.6 Affected: 2.3.1.50 Affected: 2.3.1.52 Affected: 3.2.1.19 Affected: 2.2.1.35 Affected: 3.1.1.53 Affected: 3.1.1.70 Affected: 3.2.1.20 Affected: 3.5.1.2 Affected: 1.103.1.12 Affected: 2.3.1.51 Affected: 3.3.2.42 Affected: 3.4.1.1 Affected: 3.3.2.12 Affected: 2.1.1.31 Affected: 3.5.1.23 Affected: 3.3.2.53 Affected: 3.4.1.14 Affected: 3.3.2.2 Affected: 3.4.1.20 Affected: 3.3.2.35 Affected: 2.2.1.34 Affected: 1.102.21 Affected: 3.3.2.5 Affected: 3.5.1.31 Affected: 3.6.1.5 Affected: 3.2.1.31 Affected: 3.5.1.37 Affected: 3.4.1.40 Affected: 3.6.1.17 Affected: 3.6.1.21 Affected: 3.2.1.32 Affected: 3.2.1.33 Affected: 3.6.1.35 Affected: 3.6.1.36 Affected: 3.7.1.5 Affected: 3.6.1.47 Affected: 3.7.1.22 Affected: 3.6.1.52 Affected: 3.7.1.39 Affected: 3.8.1.1 Affected: 3.7.1.51 Affected: 3.8.1.19 Affected: 3.8.1.36 Affected: 3.7.1.59 Affected: 3.8.1.39 Affected: 3.9.1.1 Affected: 3.9.1.10 Affected: 3.9.1.24 Affected: 3.9.1.25 Affected: 3.9.1.28 Affected: 3.9.1.38 Affected: 3.8.1.53 Affected: 3.9.1.52 Affected: 3.10.1.1 Affected: 3.9.1.64 Affected: 3.10.2.11 Affected: 3.9.1.66 Affected: 3.10.3.19 Affected: 3.9.1.69 Affected: 3.10.4.8 Affected: 3.10.5.6 Affected: 4.0.1.1 Affected: 4.0.2.4 Affected: 4.0.2.5 Affected: 3.10.6.3 Affected: 3.10.7.4 Affected: 4.0.3.13 Affected: 4.0.3.17 Affected: 3.10.8.3 |
{
"containers": {
"adp": [
{
"descriptions": [
{
"lang": "en",
"value": "The CVE Program recognizes that this CVE Record provides vulnerability information that a Supplier CNA believes is very important to consumers. The CVE Program has flagged this CVE Record as it assigns a single CVE ID to a collection of individual vulnerabilities which does not align with CVE\u0027s \"one vulnerability, one ID\" principle, and therefore provides incomplete information. For further clarification, please see the CVE Program\u0027s blog, \"Preserving Vulnerability-Level Identification\" linked below. Details within the CNA container below are viewable by clicking on the CNA name."
}
],
"providerMetadata": {
"dateUpdated": "2026-08-19T18:31:50.763Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"url": "https://www.cve.org/Media/News/item/blog/2026/06/16/Preserving-Vulnerability-Level-Identification"
}
],
"tags": [
"x_bundling-flagged-by-CVE-Program"
]
},
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-20231",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-20T03:57:03.665590Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-20T18:28:00.290Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Cisco Secure Workload",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "2.2.1.41"
},
{
"status": "affected",
"version": "3.2.1.18"
},
{
"status": "affected",
"version": "3.3.2.50"
},
{
"status": "affected",
"version": "3.4.1.28"
},
{
"status": "affected",
"version": "3.4.1.34"
},
{
"status": "affected",
"version": "2.3.1.45"
},
{
"status": "affected",
"version": "2.3.1.41"
},
{
"status": "affected",
"version": "3.3.2.28"
},
{
"status": "affected",
"version": "3.1.1.59"
},
{
"status": "affected",
"version": "2.0.2.20"
},
{
"status": "affected",
"version": "2.1.1.33"
},
{
"status": "affected",
"version": "2.1.1.29"
},
{
"status": "affected",
"version": "3.2.1.28"
},
{
"status": "affected",
"version": "3.4.1.35"
},
{
"status": "affected",
"version": "3.1.1.65"
},
{
"status": "affected",
"version": "3.1.1.67"
},
{
"status": "affected",
"version": "2.0.1.34"
},
{
"status": "affected",
"version": "2.3.1.49"
},
{
"status": "affected",
"version": "2.2.1.39"
},
{
"status": "affected",
"version": "3.4.1.19"
},
{
"status": "affected",
"version": "3.3.2.23"
},
{
"status": "affected",
"version": "3.1.1.61"
},
{
"status": "affected",
"version": "3.1.1.54"
},
{
"status": "affected",
"version": "3.5.1.17"
},
{
"status": "affected",
"version": "3.3.2.33"
},
{
"status": "affected",
"version": "3.5.1.1"
},
{
"status": "affected",
"version": "2.3.1.53"
},
{
"status": "affected",
"version": "3.5.1.20"
},
{
"status": "affected",
"version": "3.5.1.30"
},
{
"status": "affected",
"version": "3.3.2.16"
},
{
"status": "affected",
"version": "3.1.1.55"
},
{
"status": "affected",
"version": "3.4.1.6"
},
{
"status": "affected",
"version": "2.3.1.50"
},
{
"status": "affected",
"version": "2.3.1.52"
},
{
"status": "affected",
"version": "3.2.1.19"
},
{
"status": "affected",
"version": "2.2.1.35"
},
{
"status": "affected",
"version": "3.1.1.53"
},
{
"status": "affected",
"version": "3.1.1.70"
},
{
"status": "affected",
"version": "3.2.1.20"
},
{
"status": "affected",
"version": "3.5.1.2"
},
{
"status": "affected",
"version": "1.103.1.12"
},
{
"status": "affected",
"version": "2.3.1.51"
},
{
"status": "affected",
"version": "3.3.2.42"
},
{
"status": "affected",
"version": "3.4.1.1"
},
{
"status": "affected",
"version": "3.3.2.12"
},
{
"status": "affected",
"version": "2.1.1.31"
},
{
"status": "affected",
"version": "3.5.1.23"
},
{
"status": "affected",
"version": "3.3.2.53"
},
{
"status": "affected",
"version": "3.4.1.14"
},
{
"status": "affected",
"version": "3.3.2.2"
},
{
"status": "affected",
"version": "3.4.1.20"
},
{
"status": "affected",
"version": "3.3.2.35"
},
{
"status": "affected",
"version": "2.2.1.34"
},
{
"status": "affected",
"version": "1.102.21"
},
{
"status": "affected",
"version": "3.3.2.5"
},
{
"status": "affected",
"version": "3.5.1.31"
},
{
"status": "affected",
"version": "3.6.1.5"
},
{
"status": "affected",
"version": "3.2.1.31"
},
{
"status": "affected",
"version": "3.5.1.37"
},
{
"status": "affected",
"version": "3.4.1.40"
},
{
"status": "affected",
"version": "3.6.1.17"
},
{
"status": "affected",
"version": "3.6.1.21"
},
{
"status": "affected",
"version": "3.2.1.32"
},
{
"status": "affected",
"version": "3.2.1.33"
},
{
"status": "affected",
"version": "3.6.1.35"
},
{
"status": "affected",
"version": "3.6.1.36"
},
{
"status": "affected",
"version": "3.7.1.5"
},
{
"status": "affected",
"version": "3.6.1.47"
},
{
"status": "affected",
"version": "3.7.1.22"
},
{
"status": "affected",
"version": "3.6.1.52"
},
{
"status": "affected",
"version": "3.7.1.39"
},
{
"status": "affected",
"version": "3.8.1.1"
},
{
"status": "affected",
"version": "3.7.1.51"
},
{
"status": "affected",
"version": "3.8.1.19"
},
{
"status": "affected",
"version": "3.8.1.36"
},
{
"status": "affected",
"version": "3.7.1.59"
},
{
"status": "affected",
"version": "3.8.1.39"
},
{
"status": "affected",
"version": "3.9.1.1"
},
{
"status": "affected",
"version": "3.9.1.10"
},
{
"status": "affected",
"version": "3.9.1.24"
},
{
"status": "affected",
"version": "3.9.1.25"
},
{
"status": "affected",
"version": "3.9.1.28"
},
{
"status": "affected",
"version": "3.9.1.38"
},
{
"status": "affected",
"version": "3.8.1.53"
},
{
"status": "affected",
"version": "3.9.1.52"
},
{
"status": "affected",
"version": "3.10.1.1"
},
{
"status": "affected",
"version": "3.9.1.64"
},
{
"status": "affected",
"version": "3.10.2.11"
},
{
"status": "affected",
"version": "3.9.1.66"
},
{
"status": "affected",
"version": "3.10.3.19"
},
{
"status": "affected",
"version": "3.9.1.69"
},
{
"status": "affected",
"version": "3.10.4.8"
},
{
"status": "affected",
"version": "3.10.5.6"
},
{
"status": "affected",
"version": "4.0.1.1"
},
{
"status": "affected",
"version": "4.0.2.4"
},
{
"status": "affected",
"version": "4.0.2.5"
},
{
"status": "affected",
"version": "3.10.6.3"
},
{
"status": "affected",
"version": "3.10.7.4"
},
{
"status": "affected",
"version": "4.0.3.13"
},
{
"status": "affected",
"version": "4.0.3.17"
},
{
"status": "affected",
"version": "3.10.8.3"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "As part of Cisco\u0027s ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.\r\n\u0026nbsp;\r\nThe vulnerabilities tracked by CVE-2026-20231 are related to improper neutralization of special elements issues that are grouped under the Common Weakness Enumeration (CWE) CWE-74."
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.9,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-74",
"description": "Improper Neutralization of Special Elements in Output Used by a Downstream Component (\u0027Injection\u0027)",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-19T16:16:58.948Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-hardening-csw1-shSvndWP",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-csw1-shSvndWP"
}
],
"source": {
"advisory": "cisco-sa-hardening-csw1-shSvndWP",
"defects": [
"CSCwu14237"
],
"discovery": "INTERNAL"
},
"title": "Cisco Secure Workload Software Security Hardening Release August 2026 - Improper Neutralization of Special Elements Vulnerabilities"
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2026-20231",
"datePublished": "2026-08-19T16:16:58.948Z",
"dateReserved": "2025-10-08T11:59:15.399Z",
"dateUpdated": "2026-08-20T18:28:00.290Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-20223 (GCVE-0-2026-20223)
Vulnerability from cvelistv5 – Published: 2026-05-20 16:06 – Updated: 2026-05-21 03:55
VLAI
EPSS
VEX
Title
Cisco Secure Workload Unauthorized API Access Vulnerability
Summary
A vulnerability in the access validation of internal REST APIs of Cisco Secure Workload could allow an unauthenticated, remote attacker to access site resources with the privileges of the Site Admin role.
This vulnerability is due to insufficient validation and authentication when accessing REST API endpoints. An attacker could exploit this vulnerability if they are able to send a crafted API request to an affected endpoint. A successful exploit could allow the attacker to read sensitive information and make configuration changes across tenant boundaries with the privileges of the Site Admin user.
Severity
10 (Critical)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-05-20 00:00 UTC
CWE
- CWE-306 - Missing Authentication for Critical Function
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Cisco | Cisco Secure Workload |
Affected:
2.2.1.41
Affected: 3.2.1.18 Affected: 3.3.2.50 Affected: 3.4.1.28 Affected: 3.4.1.34 Affected: 2.3.1.45 Affected: 2.3.1.41 Affected: 3.3.2.28 Affected: 3.1.1.59 Affected: 2.0.2.20 Affected: 2.1.1.33 Affected: 2.1.1.29 Affected: 3.2.1.28 Affected: 3.4.1.35 Affected: 3.1.1.65 Affected: 3.1.1.67 Affected: 2.0.1.34 Affected: 2.3.1.49 Affected: 2.2.1.39 Affected: 3.4.1.19 Affected: 3.3.2.23 Affected: 3.1.1.61 Affected: 3.1.1.54 Affected: 3.5.1.17 Affected: 3.3.2.33 Affected: 3.5.1.1 Affected: 2.3.1.53 Affected: 3.5.1.20 Affected: 3.5.1.30 Affected: 3.3.2.16 Affected: 3.1.1.55 Affected: 3.4.1.6 Affected: 2.3.1.50 Affected: 2.3.1.52 Affected: 3.2.1.19 Affected: 2.2.1.35 Affected: 3.1.1.53 Affected: 3.1.1.70 Affected: 3.2.1.20 Affected: 3.5.1.2 Affected: 1.103.1.12 Affected: 2.3.1.51 Affected: 3.3.2.42 Affected: 3.4.1.1 Affected: 3.3.2.12 Affected: 2.1.1.31 Affected: 3.5.1.23 Affected: 3.3.2.53 Affected: 3.4.1.14 Affected: 3.3.2.2 Affected: 3.4.1.20 Affected: 3.3.2.35 Affected: 2.2.1.34 Affected: 1.102.21 Affected: 3.3.2.5 Affected: 3.5.1.31 Affected: 3.6.1.5 Affected: 3.2.1.31 Affected: 3.5.1.37 Affected: 3.4.1.40 Affected: 3.6.1.17 Affected: 3.6.1.21 Affected: 3.2.1.32 Affected: 3.2.1.33 Affected: 3.6.1.35 Affected: 3.6.1.36 Affected: 3.7.1.5 Affected: 3.6.1.47 Affected: 3.7.1.22 Affected: 3.6.1.52 Affected: 3.7.1.39 Affected: 3.8.1.1 Affected: 3.7.1.51 Affected: 3.8.1.19 Affected: 3.8.1.36 Affected: 3.7.1.59 Affected: 3.8.1.39 Affected: 3.9.1.1 Affected: 3.9.1.10 Affected: 3.9.1.24 Affected: 3.9.1.25 Affected: 3.9.1.28 Affected: 3.9.1.38 Affected: 3.8.1.53 Affected: 3.9.1.52 Affected: 3.10.1.1 Affected: 3.9.1.64 Affected: 3.10.2.11 Affected: 3.9.1.66 Affected: 3.10.3.19 Affected: 3.9.1.69 Affected: 3.10.4.8 Affected: 3.10.5.6 Affected: 4.0.1.1 Affected: 4.0.2.4 Affected: 4.0.2.5 Affected: 3.10.6.3 Affected: 3.10.7.4 Affected: 4.0.3.13 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-20223",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-05-20T00:00:00+00:00",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-05-21T03:55:37.210Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Cisco Secure Workload",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "2.2.1.41"
},
{
"status": "affected",
"version": "3.2.1.18"
},
{
"status": "affected",
"version": "3.3.2.50"
},
{
"status": "affected",
"version": "3.4.1.28"
},
{
"status": "affected",
"version": "3.4.1.34"
},
{
"status": "affected",
"version": "2.3.1.45"
},
{
"status": "affected",
"version": "2.3.1.41"
},
{
"status": "affected",
"version": "3.3.2.28"
},
{
"status": "affected",
"version": "3.1.1.59"
},
{
"status": "affected",
"version": "2.0.2.20"
},
{
"status": "affected",
"version": "2.1.1.33"
},
{
"status": "affected",
"version": "2.1.1.29"
},
{
"status": "affected",
"version": "3.2.1.28"
},
{
"status": "affected",
"version": "3.4.1.35"
},
{
"status": "affected",
"version": "3.1.1.65"
},
{
"status": "affected",
"version": "3.1.1.67"
},
{
"status": "affected",
"version": "2.0.1.34"
},
{
"status": "affected",
"version": "2.3.1.49"
},
{
"status": "affected",
"version": "2.2.1.39"
},
{
"status": "affected",
"version": "3.4.1.19"
},
{
"status": "affected",
"version": "3.3.2.23"
},
{
"status": "affected",
"version": "3.1.1.61"
},
{
"status": "affected",
"version": "3.1.1.54"
},
{
"status": "affected",
"version": "3.5.1.17"
},
{
"status": "affected",
"version": "3.3.2.33"
},
{
"status": "affected",
"version": "3.5.1.1"
},
{
"status": "affected",
"version": "2.3.1.53"
},
{
"status": "affected",
"version": "3.5.1.20"
},
{
"status": "affected",
"version": "3.5.1.30"
},
{
"status": "affected",
"version": "3.3.2.16"
},
{
"status": "affected",
"version": "3.1.1.55"
},
{
"status": "affected",
"version": "3.4.1.6"
},
{
"status": "affected",
"version": "2.3.1.50"
},
{
"status": "affected",
"version": "2.3.1.52"
},
{
"status": "affected",
"version": "3.2.1.19"
},
{
"status": "affected",
"version": "2.2.1.35"
},
{
"status": "affected",
"version": "3.1.1.53"
},
{
"status": "affected",
"version": "3.1.1.70"
},
{
"status": "affected",
"version": "3.2.1.20"
},
{
"status": "affected",
"version": "3.5.1.2"
},
{
"status": "affected",
"version": "1.103.1.12"
},
{
"status": "affected",
"version": "2.3.1.51"
},
{
"status": "affected",
"version": "3.3.2.42"
},
{
"status": "affected",
"version": "3.4.1.1"
},
{
"status": "affected",
"version": "3.3.2.12"
},
{
"status": "affected",
"version": "2.1.1.31"
},
{
"status": "affected",
"version": "3.5.1.23"
},
{
"status": "affected",
"version": "3.3.2.53"
},
{
"status": "affected",
"version": "3.4.1.14"
},
{
"status": "affected",
"version": "3.3.2.2"
},
{
"status": "affected",
"version": "3.4.1.20"
},
{
"status": "affected",
"version": "3.3.2.35"
},
{
"status": "affected",
"version": "2.2.1.34"
},
{
"status": "affected",
"version": "1.102.21"
},
{
"status": "affected",
"version": "3.3.2.5"
},
{
"status": "affected",
"version": "3.5.1.31"
},
{
"status": "affected",
"version": "3.6.1.5"
},
{
"status": "affected",
"version": "3.2.1.31"
},
{
"status": "affected",
"version": "3.5.1.37"
},
{
"status": "affected",
"version": "3.4.1.40"
},
{
"status": "affected",
"version": "3.6.1.17"
},
{
"status": "affected",
"version": "3.6.1.21"
},
{
"status": "affected",
"version": "3.2.1.32"
},
{
"status": "affected",
"version": "3.2.1.33"
},
{
"status": "affected",
"version": "3.6.1.35"
},
{
"status": "affected",
"version": "3.6.1.36"
},
{
"status": "affected",
"version": "3.7.1.5"
},
{
"status": "affected",
"version": "3.6.1.47"
},
{
"status": "affected",
"version": "3.7.1.22"
},
{
"status": "affected",
"version": "3.6.1.52"
},
{
"status": "affected",
"version": "3.7.1.39"
},
{
"status": "affected",
"version": "3.8.1.1"
},
{
"status": "affected",
"version": "3.7.1.51"
},
{
"status": "affected",
"version": "3.8.1.19"
},
{
"status": "affected",
"version": "3.8.1.36"
},
{
"status": "affected",
"version": "3.7.1.59"
},
{
"status": "affected",
"version": "3.8.1.39"
},
{
"status": "affected",
"version": "3.9.1.1"
},
{
"status": "affected",
"version": "3.9.1.10"
},
{
"status": "affected",
"version": "3.9.1.24"
},
{
"status": "affected",
"version": "3.9.1.25"
},
{
"status": "affected",
"version": "3.9.1.28"
},
{
"status": "affected",
"version": "3.9.1.38"
},
{
"status": "affected",
"version": "3.8.1.53"
},
{
"status": "affected",
"version": "3.9.1.52"
},
{
"status": "affected",
"version": "3.10.1.1"
},
{
"status": "affected",
"version": "3.9.1.64"
},
{
"status": "affected",
"version": "3.10.2.11"
},
{
"status": "affected",
"version": "3.9.1.66"
},
{
"status": "affected",
"version": "3.10.3.19"
},
{
"status": "affected",
"version": "3.9.1.69"
},
{
"status": "affected",
"version": "3.10.4.8"
},
{
"status": "affected",
"version": "3.10.5.6"
},
{
"status": "affected",
"version": "4.0.1.1"
},
{
"status": "affected",
"version": "4.0.2.4"
},
{
"status": "affected",
"version": "4.0.2.5"
},
{
"status": "affected",
"version": "3.10.6.3"
},
{
"status": "affected",
"version": "3.10.7.4"
},
{
"status": "affected",
"version": "4.0.3.13"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the\u0026nbsp;access validation of internal REST APIs of Cisco Secure Workload could allow an unauthenticated, remote attacker to access site resources with the privileges of the\u0026nbsp;Site Admin role.\r\n\r\nThis vulnerability is due to insufficient validation and authentication when accessing REST API endpoints. An attacker could exploit this vulnerability if they are able to send a crafted API request to an affected endpoint. A successful exploit could allow the attacker to read sensitive information and make configuration changes across tenant boundaries with the privileges of the\u0026nbsp;Site Admin user.\u0026nbsp;"
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 10,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-306",
"description": "Missing Authentication for Critical Function",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-05-20T16:06:30.740Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-csw-pnbsa-g8WEnuy",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-csw-pnbsa-g8WEnuy"
}
],
"source": {
"advisory": "cisco-sa-csw-pnbsa-g8WEnuy",
"defects": [
"CSCwt99942"
],
"discovery": "INTERNAL"
},
"title": "Cisco Secure Workload Unauthorized API Access Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2026-20223",
"datePublished": "2026-05-20T16:06:30.740Z",
"dateReserved": "2025-10-08T11:59:15.399Z",
"dateUpdated": "2026-05-21T03:55:37.210Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2022-20652 (GCVE-0-2022-20652)
Vulnerability from cvelistv5 – Published: 2024-11-15 15:58 – Updated: 2024-11-19 16:08
VLAI
EPSS
VEX
Title
Cisco Tetration Command Injection Vulnerability
Summary
A vulnerability in the web-based management interface and in the API subsystem of Cisco Tetration could allow an authenticated, remote attacker to inject arbitrary commands to be executed with root-level privileges on the underlying operating system.
This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by submitting a crafted HTTP message to the affected system. A successful exploit could allow the attacker to execute commands with root-level privileges. To exploit this vulnerability, an attacker would need valid administrator-level credentials.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
Severity
6.5 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2024-11-15 19:42 UTC
CWE
- CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Assigner
References
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Cisco | Cisco Secure Workload |
Affected:
2.2.1.41
Affected: 3.2.1.18 Affected: 3.3.2.50 Affected: 3.4.1.28 Affected: 3.4.1.34 Affected: 2.3.1.45 Affected: 2.3.1.41 Affected: 3.3.2.28 Affected: 3.1.1.59 Affected: 2.0.2.20 Affected: 2.1.1.33 Affected: 2.1.1.29 Affected: 3.2.1.28 Affected: 3.4.1.35 Affected: 3.1.1.65 Affected: 3.1.1.67 Affected: 2.0.1.34 Affected: 2.3.1.49 Affected: 2.2.1.39 Affected: 3.4.1.19 Affected: 3.3.2.23 Affected: 3.1.1.61 Affected: 3.1.1.54 Affected: 3.5.1.17 Affected: 3.3.2.33 Affected: 3.5.1.1 Affected: 2.3.1.53 Affected: 3.5.1.20 Affected: 3.5.1.30 Affected: 3.3.2.16 Affected: 3.4.1.6 Affected: 2.3.1.50 Affected: 2.3.1.52 Affected: 3.2.1.19 Affected: 2.2.1.35 Affected: 3.1.1.53 Affected: 3.1.1.70 Affected: 3.2.1.20 Affected: 3.5.1.2 Affected: 1.103.1.12 Affected: 2.3.1.51 Affected: 3.3.2.42 Affected: 3.4.1.1 Affected: 3.3.2.12 Affected: 2.1.1.31 Affected: 3.5.1.23 Affected: 3.3.2.53 Affected: 3.4.1.14 Affected: 3.3.2.2 Affected: 3.4.1.20 Affected: 3.3.2.35 Affected: 1.102.21 Affected: 3.3.2.5 |
|
| cisco | secure_workload |
Affected:
0 , < 3.5.1.37
(custom)
cpe:2.3:a:cisco:secure_workload:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:cisco:secure_workload:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "secure_workload",
"vendor": "cisco",
"versions": [
{
"lessThan": "3.5.1.37",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2022-20652",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-15T19:42:12.340434Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-19T16:08:33.640Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Cisco Secure Workload",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "2.2.1.41"
},
{
"status": "affected",
"version": "3.2.1.18"
},
{
"status": "affected",
"version": "3.3.2.50"
},
{
"status": "affected",
"version": "3.4.1.28"
},
{
"status": "affected",
"version": "3.4.1.34"
},
{
"status": "affected",
"version": "2.3.1.45"
},
{
"status": "affected",
"version": "2.3.1.41"
},
{
"status": "affected",
"version": "3.3.2.28"
},
{
"status": "affected",
"version": "3.1.1.59"
},
{
"status": "affected",
"version": "2.0.2.20"
},
{
"status": "affected",
"version": "2.1.1.33"
},
{
"status": "affected",
"version": "2.1.1.29"
},
{
"status": "affected",
"version": "3.2.1.28"
},
{
"status": "affected",
"version": "3.4.1.35"
},
{
"status": "affected",
"version": "3.1.1.65"
},
{
"status": "affected",
"version": "3.1.1.67"
},
{
"status": "affected",
"version": "2.0.1.34"
},
{
"status": "affected",
"version": "2.3.1.49"
},
{
"status": "affected",
"version": "2.2.1.39"
},
{
"status": "affected",
"version": "3.4.1.19"
},
{
"status": "affected",
"version": "3.3.2.23"
},
{
"status": "affected",
"version": "3.1.1.61"
},
{
"status": "affected",
"version": "3.1.1.54"
},
{
"status": "affected",
"version": "3.5.1.17"
},
{
"status": "affected",
"version": "3.3.2.33"
},
{
"status": "affected",
"version": "3.5.1.1"
},
{
"status": "affected",
"version": "2.3.1.53"
},
{
"status": "affected",
"version": "3.5.1.20"
},
{
"status": "affected",
"version": "3.5.1.30"
},
{
"status": "affected",
"version": "3.3.2.16"
},
{
"status": "affected",
"version": "3.4.1.6"
},
{
"status": "affected",
"version": "2.3.1.50"
},
{
"status": "affected",
"version": "2.3.1.52"
},
{
"status": "affected",
"version": "3.2.1.19"
},
{
"status": "affected",
"version": "2.2.1.35"
},
{
"status": "affected",
"version": "3.1.1.53"
},
{
"status": "affected",
"version": "3.1.1.70"
},
{
"status": "affected",
"version": "3.2.1.20"
},
{
"status": "affected",
"version": "3.5.1.2"
},
{
"status": "affected",
"version": "1.103.1.12"
},
{
"status": "affected",
"version": "2.3.1.51"
},
{
"status": "affected",
"version": "3.3.2.42"
},
{
"status": "affected",
"version": "3.4.1.1"
},
{
"status": "affected",
"version": "3.3.2.12"
},
{
"status": "affected",
"version": "2.1.1.31"
},
{
"status": "affected",
"version": "3.5.1.23"
},
{
"status": "affected",
"version": "3.3.2.53"
},
{
"status": "affected",
"version": "3.4.1.14"
},
{
"status": "affected",
"version": "3.3.2.2"
},
{
"status": "affected",
"version": "3.4.1.20"
},
{
"status": "affected",
"version": "3.3.2.35"
},
{
"status": "affected",
"version": "1.102.21"
},
{
"status": "affected",
"version": "3.3.2.5"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the web-based management interface and in the API subsystem of Cisco\u0026nbsp;Tetration could allow an authenticated, remote attacker to inject arbitrary commands to be executed with root-level privileges on the underlying operating system.\r\nThis vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by submitting a crafted HTTP message to the affected system. A successful exploit could allow the attacker to execute commands with root-level privileges. To exploit this vulnerability, an attacker would need valid administrator-level credentials.Cisco\u0026nbsp;has released software updates that address this vulnerability. There are no workarounds that address this vulnerability."
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco\u00a0PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-78",
"description": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-15T15:58:58.429Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-tetr-cmd-injc-skrwGO",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-tetr-cmd-injc-skrwGO"
},
{
"name": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-xss-FmbPu2pe",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-xss-FmbPu2pe"
}
],
"source": {
"advisory": "cisco-sa-tetr-cmd-injc-skrwGO",
"defects": [
"CSCvz80034"
],
"discovery": "INTERNAL"
},
"title": "Cisco Tetration Command Injection Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2022-20652",
"datePublished": "2024-11-15T15:58:58.429Z",
"dateReserved": "2021-11-02T13:28:29.036Z",
"dateUpdated": "2024-11-19T16:08:33.640Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2023-20136 (GCVE-0-2023-20136)
Vulnerability from cvelistv5 – Published: 2023-06-28 00:00 – Updated: 2024-08-02 08:57
VLAI
EPSS
VEX
Summary
A vulnerability in the OpenAPI of Cisco Secure Workload could allow an authenticated, remote attacker with the privileges of a read-only user to execute operations that should require Administrator privileges. The attacker would need valid user credentials.
This vulnerability is due to improper role-based access control (RBAC) of certain OpenAPI operations. An attacker could exploit this vulnerability by issuing a crafted OpenAPI function call with valid credentials. A successful exploit could allow the attacker to execute OpenAPI operations that are reserved for the Administrator user, including the creation and deletion of user labels.
Severity
4.3 (Medium)
CWE
- CWE-648 - Incorrect Use of Privileged APIs
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Cisco | Cisco Secure Workload |
Affected:
1.102.21
Affected: 1.103.1.12 Affected: 2.0.1.34 Affected: 2.0.2.20 Affected: 2.1.1.29 Affected: 2.1.1.31 Affected: 2.1.1.33 Affected: 2.2.1.34 Affected: 2.2.1.35 Affected: 2.2.1.39 Affected: 2.2.1.41 Affected: 2.3.1.41 Affected: 2.3.1.45 Affected: 2.3.1.49 Affected: 2.3.1.50 Affected: 2.3.1.51 Affected: 2.3.1.52 Affected: 2.3.1.53 Affected: 3.1.1.53 Affected: 3.1.1.54 Affected: 3.1.1.55 Affected: 3.1.1.59 Affected: 3.1.1.61 Affected: 3.1.1.65 Affected: 3.1.1.67 Affected: 3.1.1.70 Affected: 3.2.1.18 Affected: 3.2.1.19 Affected: 3.2.1.20 Affected: 3.2.1.28 Affected: 3.2.1.31 Affected: 3.2.1.32 Affected: 3.2.1.33 Affected: 3.3.2.12 Affected: 3.3.2.16 Affected: 3.3.2.2 Affected: 3.3.2.23 Affected: 3.3.2.28 Affected: 3.3.2.33 Affected: 3.3.2.35 Affected: 3.3.2.42 Affected: 3.3.2.5 Affected: 3.3.2.50 Affected: 3.3.2.53 Affected: 3.4.1.1 Affected: 3.4.1.14 Affected: 3.4.1.19 Affected: 3.4.1.20 Affected: 3.4.1.28 Affected: 3.4.1.34 Affected: 3.4.1.35 Affected: 3.4.1.6 Affected: 3.4.1.40 Affected: 3.5.1.1 Affected: 3.5.1.17 Affected: 3.5.1.2 Affected: 3.5.1.20 Affected: 3.5.1.23 Affected: 3.5.1.30 Affected: 3.5.1.31 Affected: 3.5.1.37 Affected: 3.6.1.17 Affected: 3.6.1.21 Affected: 3.6.1.36 Affected: 3.6.1.47 Affected: 3.6.1.5 Affected: 3.6.1.52 Affected: 3.7.1.22 Affected: 3.7.1.5 |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-02T08:57:36.064Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "cisco-sa-csw-auth-openapi-kTndjdNX",
"tags": [
"x_transferred"
],
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-csw-auth-openapi-kTndjdNX"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "Cisco Secure Workload",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "1.102.21"
},
{
"status": "affected",
"version": "1.103.1.12"
},
{
"status": "affected",
"version": "2.0.1.34"
},
{
"status": "affected",
"version": "2.0.2.20"
},
{
"status": "affected",
"version": "2.1.1.29"
},
{
"status": "affected",
"version": "2.1.1.31"
},
{
"status": "affected",
"version": "2.1.1.33"
},
{
"status": "affected",
"version": "2.2.1.34"
},
{
"status": "affected",
"version": "2.2.1.35"
},
{
"status": "affected",
"version": "2.2.1.39"
},
{
"status": "affected",
"version": "2.2.1.41"
},
{
"status": "affected",
"version": "2.3.1.41"
},
{
"status": "affected",
"version": "2.3.1.45"
},
{
"status": "affected",
"version": "2.3.1.49"
},
{
"status": "affected",
"version": "2.3.1.50"
},
{
"status": "affected",
"version": "2.3.1.51"
},
{
"status": "affected",
"version": "2.3.1.52"
},
{
"status": "affected",
"version": "2.3.1.53"
},
{
"status": "affected",
"version": "3.1.1.53"
},
{
"status": "affected",
"version": "3.1.1.54"
},
{
"status": "affected",
"version": "3.1.1.55"
},
{
"status": "affected",
"version": "3.1.1.59"
},
{
"status": "affected",
"version": "3.1.1.61"
},
{
"status": "affected",
"version": "3.1.1.65"
},
{
"status": "affected",
"version": "3.1.1.67"
},
{
"status": "affected",
"version": "3.1.1.70"
},
{
"status": "affected",
"version": "3.2.1.18"
},
{
"status": "affected",
"version": "3.2.1.19"
},
{
"status": "affected",
"version": "3.2.1.20"
},
{
"status": "affected",
"version": "3.2.1.28"
},
{
"status": "affected",
"version": "3.2.1.31"
},
{
"status": "affected",
"version": "3.2.1.32"
},
{
"status": "affected",
"version": "3.2.1.33"
},
{
"status": "affected",
"version": "3.3.2.12"
},
{
"status": "affected",
"version": "3.3.2.16"
},
{
"status": "affected",
"version": "3.3.2.2"
},
{
"status": "affected",
"version": "3.3.2.23"
},
{
"status": "affected",
"version": "3.3.2.28"
},
{
"status": "affected",
"version": "3.3.2.33"
},
{
"status": "affected",
"version": "3.3.2.35"
},
{
"status": "affected",
"version": "3.3.2.42"
},
{
"status": "affected",
"version": "3.3.2.5"
},
{
"status": "affected",
"version": "3.3.2.50"
},
{
"status": "affected",
"version": "3.3.2.53"
},
{
"status": "affected",
"version": "3.4.1.1"
},
{
"status": "affected",
"version": "3.4.1.14"
},
{
"status": "affected",
"version": "3.4.1.19"
},
{
"status": "affected",
"version": "3.4.1.20"
},
{
"status": "affected",
"version": "3.4.1.28"
},
{
"status": "affected",
"version": "3.4.1.34"
},
{
"status": "affected",
"version": "3.4.1.35"
},
{
"status": "affected",
"version": "3.4.1.6"
},
{
"status": "affected",
"version": "3.4.1.40"
},
{
"status": "affected",
"version": "3.5.1.1"
},
{
"status": "affected",
"version": "3.5.1.17"
},
{
"status": "affected",
"version": "3.5.1.2"
},
{
"status": "affected",
"version": "3.5.1.20"
},
{
"status": "affected",
"version": "3.5.1.23"
},
{
"status": "affected",
"version": "3.5.1.30"
},
{
"status": "affected",
"version": "3.5.1.31"
},
{
"status": "affected",
"version": "3.5.1.37"
},
{
"status": "affected",
"version": "3.6.1.17"
},
{
"status": "affected",
"version": "3.6.1.21"
},
{
"status": "affected",
"version": "3.6.1.36"
},
{
"status": "affected",
"version": "3.6.1.47"
},
{
"status": "affected",
"version": "3.6.1.5"
},
{
"status": "affected",
"version": "3.6.1.52"
},
{
"status": "affected",
"version": "3.7.1.22"
},
{
"status": "affected",
"version": "3.7.1.5"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the OpenAPI of Cisco Secure Workload could allow an authenticated, remote attacker with the privileges of a read-only user to execute operations that should require Administrator privileges. The attacker would need valid user credentials.\r\n\r This vulnerability is due to improper role-based access control (RBAC) of certain OpenAPI operations. An attacker could exploit this vulnerability by issuing a crafted OpenAPI function call with valid credentials. A successful exploit could allow the attacker to execute OpenAPI operations that are reserved for the Administrator user, including the creation and deletion of user labels."
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-648",
"description": "Incorrect Use of Privileged APIs",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-01-25T16:57:48.042Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-csw-auth-openapi-kTndjdNX",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-csw-auth-openapi-kTndjdNX"
}
],
"source": {
"advisory": "cisco-sa-csw-auth-openapi-kTndjdNX",
"defects": [
"CSCwe74218"
],
"discovery": "INTERNAL"
}
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2023-20136",
"datePublished": "2023-06-28T00:00:00.000Z",
"dateReserved": "2022-10-27T00:00:00.000Z",
"dateUpdated": "2024-08-02T08:57:36.064Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2021-34789 (GCVE-0-2021-34789)
Vulnerability from cvelistv5 – Published: 2021-10-21 02:50 – Updated: 2024-11-07 21:47
VLAI
EPSS
VEX
Title
Cisco Tetration Stored Cross-Site Scripting Vulnerability
Summary
A vulnerability in the web-based management interface of Cisco Tetration could allow an authenticated, remote attacker to perform a stored cross-site scripting (XSS) attack on an affected system. This vulnerability exists because the web-based management interface does not sufficiently validate user-supplied input. An attacker could exploit this vulnerability by injecting malicious code into specific pages of the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. To exploit this vulnerability, the attacker would need valid administrative credentials.
Severity
4.8 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2024-11-07 21:39 UTC
CWE
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://tools.cisco.com/security/center/content/C… | vendor-advisoryx_refsource_CISCO |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Cisco | Cisco Secure Workload |
Affected:
n/a
|
Date Public
2021-10-20 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-04T00:19:48.151Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "20211020 Cisco Tetration Stored Cross-Site Scripting Vulnerability",
"tags": [
"vendor-advisory",
"x_refsource_CISCO",
"x_transferred"
],
"url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sec-work-xss-t6SYtu8Q"
}
],
"title": "CVE Program Container"
},
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2021-34789",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-07T21:39:57.294268Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-07T21:47:00.584Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Cisco Secure Workload",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2021-10-20T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the web-based management interface of Cisco Tetration could allow an authenticated, remote attacker to perform a stored cross-site scripting (XSS) attack on an affected system. This vulnerability exists because the web-based management interface does not sufficiently validate user-supplied input. An attacker could exploit this vulnerability by injecting malicious code into specific pages of the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. To exploit this vulnerability, the attacker would need valid administrative credentials."
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-79",
"description": "CWE-79",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2021-10-21T02:50:28.000Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "20211020 Cisco Tetration Stored Cross-Site Scripting Vulnerability",
"tags": [
"vendor-advisory",
"x_refsource_CISCO"
],
"url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sec-work-xss-t6SYtu8Q"
}
],
"source": {
"advisory": "cisco-sa-sec-work-xss-t6SYtu8Q",
"defect": [
[
"CSCvz50570"
]
],
"discovery": "INTERNAL"
},
"title": "Cisco Tetration Stored Cross-Site Scripting Vulnerability",
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "psirt@cisco.com",
"DATE_PUBLIC": "2021-10-20T16:00:00",
"ID": "CVE-2021-34789",
"STATE": "PUBLIC",
"TITLE": "Cisco Tetration Stored Cross-Site Scripting Vulnerability"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Cisco Secure Workload",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "Cisco"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "A vulnerability in the web-based management interface of Cisco Tetration could allow an authenticated, remote attacker to perform a stored cross-site scripting (XSS) attack on an affected system. This vulnerability exists because the web-based management interface does not sufficiently validate user-supplied input. An attacker could exploit this vulnerability by injecting malicious code into specific pages of the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. To exploit this vulnerability, the attacker would need valid administrative credentials."
}
]
},
"exploit": [
{
"lang": "en",
"value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
}
],
"impact": {
"cvss": {
"baseScore": "4.8",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-79"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "20211020 Cisco Tetration Stored Cross-Site Scripting Vulnerability",
"refsource": "CISCO",
"url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sec-work-xss-t6SYtu8Q"
}
]
},
"source": {
"advisory": "cisco-sa-sec-work-xss-t6SYtu8Q",
"defect": [
[
"CSCvz50570"
]
],
"discovery": "INTERNAL"
}
}
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2021-34789",
"datePublished": "2021-10-21T02:50:28.278Z",
"dateReserved": "2021-06-15T00:00:00.000Z",
"dateUpdated": "2024-11-07T21:47:00.584Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}