CVE-2026-20317
CVSS 10 CRITICAL: as part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. EPSS 0.6% (44th percentile).
Vulnerabilities & Exploits
Cisco and the Dutch NCSC said on August 21 that Cisco Secure Workload has been patched for five vulnerabilities, including flaws tied to authentication, access control, input validation, injection, and buffer handling. Cisco says its engineering team found the issues during an internal security review, and the fixes ship as software hardening updates.
The five CVEs span CVE-2026-20231, CVE-2026-20315, CVE-2026-20317, CVE-2026-20318, and CVE-2026-20319. In plain terms, that means a single upgrade path is not guaranteed to cover every weak spot: depending on deployment, the Cluster, Agent, and Connector pieces may each need aligned updates, or one layer can stay out of sync with the rest.
For operators, the exposure sits in the product’s component mix rather than in one isolated bug. If Secure Workload is deployed on-prem or in a hybrid setup, the remaining risk is any part of the control or data path that still runs an unaligned version after the patch cycle.
7 sources · Aug 21
CVSS 10 CRITICAL: as part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. EPSS 0.6% (44th percentile).
CVSS 9.9 CRITICAL: as part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. EPSS 0.5% (42nd percentile).
CVSS 10 CRITICAL: as part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. EPSS 0.5% (39th percentile).
CVSS 7.5 HIGH: as part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. EPSS 0.5% (38th percentile).
CVSS 9.6 CRITICAL: as part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. EPSS 0.4% (36th percentile).
The Hacker News
Cisco Patches Nine Crosswork and Secure Workload Flaws, Five Scoring CVSS 10.0
Cisco patches nine Crosswork and Secure Workload flaws, including four CVSS 10.0 bugs; none are known to be actively exploited.
originalNCSC-NL Advisories
Kwetsbaarheden verholpen in Cisco Secure Workload
Cisco heeft meerdere kwetsbaarheden verholpen in Cisco Secure Workload.
originalINCIBE-CERT
Múltiples vulnerabilidades en productos de Cisco
Cisco ha publicado 9 vulnerabilidades: 8 de severidad crítica y 1 de severidad alta, que afectan a los
originalPart of the PlainSec briefing for 2026-08-24
Every edition of this story: Cisco Secure Workload Gets Five-CVE Hardening Fix