CVE-2026-20317
CVSS 10 CRITICAL: as part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. EPSS 0.6% (44º percentile).
Vulnerabilità ed exploit
Cisco Secure Workload non ha un solo punto da correggere: Cisco e l'NCSC olandese hanno pubblicato aggiornamenti per cinque CVE, con punteggi fino a 10.0. La disclosure ora chiarisce che le debolezze coprono autenticazione, controllo accessi, validazione dell'input, injection e gestione del buffer.
Cisco le ha trovate in una security review interna e le ha chiuse con software hardening updates. Il quadro pratico è che Cluster, Agent e Connector possono dover essere aggiornati in modo coordinato; un solo rilascio di componente non basta a coprire tutta l'esposizione.
Non c'è un segnale di sfruttamento attivo. Per chi gestisce installazioni on-prem o ibride, il punto non è un rischio nuovo, ma lo stato reale del parco: versioni miste possono lasciare aperto un pezzo della catena anche dopo aver corretto un altro.
7 fonti · 21 ago
CVSS 10 CRITICAL: as part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. EPSS 0.6% (44º percentile).
CVSS 9.9 CRITICAL: as part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. EPSS 0.5% (42º percentile).
CVSS 10 CRITICAL: as part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. EPSS 0.5% (39º percentile).
CVSS 7.5 HIGH: as part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. EPSS 0.5% (38º percentile).
CVSS 9.6 CRITICAL: as part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. EPSS 0.4% (36º percentile).
The Hacker News
Cisco Patches Nine Crosswork and Secure Workload Flaws, Five Scoring CVSS 10.0
Cisco patches nine Crosswork and Secure Workload flaws, including four CVSS 10.0 bugs; none are known to be actively exploited.
originaleNCSC-NL Advisories
Kwetsbaarheden verholpen in Cisco Secure Workload
Cisco heeft meerdere kwetsbaarheden verholpen in Cisco Secure Workload.
originaleINCIBE-CERT
Múltiples vulnerabilidades en productos de Cisco
Cisco ha publicado 9 vulnerabilidades: 8 de severidad crítica y 1 de severidad alta, que afectan a los
originalePart of the PlainSec briefing for 2026-08-24
Every edition of this story: Cinque CVE in Cisco Secure Workload richiedono aggiornamenti coordinati