CYBERSIXT Signal Over Noise
securityonline.info 8/20/2026, 2:32:42 AM · external

CVE-2026-20315 & CVE-2026-20317: Cisco Secure Workload Auth Bypass, Privilege Escalation Hit CVSS 10

CVE-2026-20315 & CVE-2026-20317: Cisco Secure Workload Auth Bypass, Privilege Escalation Hit CVSS 10
CyberSIXT Evidence Panel
Primary Source sec.cloudapps.cisco.com
CVE Intel
CVE-2026-20315 - NVD Not in KEV 10 CRITICAL Patch Unknown
CVE-2026-20317 - NVD Not in KEV 10 CRITICAL Patch Unknown
CVE-2026-20231 - NVD Not in KEV 9.9 CRITICAL Patch Unknown
CVE-2026-20318 - NVD Not in KEV 9.6 CRITICAL Patch Unknown
CVE-2026-20319 - NVD Not in KEV 7.5 HIGH Patch Unknown
CISA KEV Not in KEV
Patch Patch Status Unknown

CISCO announced critical vulnerabilities (CVE-2026-20315, CVE-2026-20317) in its Secure Workload product, rated with a maximum CVSS score of 10. These flaws involve authentication bypass and improper access control, posing significant security risks. No exploitation has been reported yet. Users are advised to upgrade to the latest versions, as no workarounds are available. Cisco has already patched their SaaS offering, but customers need to update Agent and Connector components manually. Additional vulnerabilities include CVE-2026-20231, CVE-2026-20318, and CVE-2026-20319.

View Primary Source Via securityonline.info

Article by CyberSIXT