Security AffairsPierluigi Paganini
Cisco fixed maximum severity flaw CVE-2026-20223 in Secure Workload
Cisco has addressed a critical vulnerability (CVE-2026-20223) in its Secure Workload platform that could allow attackers to gain Site Admin privileges via crafted API requests. The flaw, with a CVSS score of 10.0, is due to insufficient validation and authentication in its internal REST API endpoints. Although no active exploitation has been reported, Cisco urges users to update to fixed versions 3.10.8.3 and 4.0.3.17 to mitigate risks. The vulnerability affects both SaaS and on-premises deployments but does not impact the web management interface.
AI summary of the original article from Security Affairs, written automatically by a language model. Quotes, figures and names come from that article; check it before relying on a detail. Read the original · How summaries are made
Story timeline CVE-2026-20223
Full timelineShow as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Thu 21 May · 12:12 UTC | SecurityWeek | Cisco Patches Critical Vulnerability in Secure Workload |
| Thu 21 May · 14:31 UTC | Security Affairs | Cisco fixed maximum severity flaw CVE-2026-20223 in Secure Workload (this article) |