Cisco Patches Four Critical Secure Workload Flaws

Cisco has published a critical security hardening advisory covering four vulnerabilities in Cisco Secure Workload. Two have a CVSS score of 10.0, one scores 9.9 and one scores 9.6.

The vulnerabilities were identified during Cisco's internal security testing and are not known to be actively exploited. There are no workarounds, so affected organisations should upgrade without delay.

Overview

• CVE: CVE-2026-20231, CVE-2026-20315, CVE-2026-20317, CVE-2026-20318

• Severity: Critical

• Highest CVSS score: 10.0

• Publication date: 19 August 2026

• Exploitation status: Not known to be actively exploited

• Workarounds: None

Affected versions

• Cisco Secure Workload 3.10 and earlier: Upgrade to 3.10.9.1

• Cisco Secure Workload 4.0: Upgrade to 4.0.4.16

Vulnerability breakdown

CVE-2026-20315 — Improper access control

• CVSS: 10.0

• Weakness: Improper access control (CWE-284).

CVE-2026-20317 — Improper authentication

• CVSS: 10.0

• Weakness: Improper authentication (CWE-287).

CVE-2026-20231 — Improper neutralisation of special elements

• CVSS: 9.9

• Weakness: Injection-related improper neutralisation (CWE-74).

CVE-2026-20318 — Improper input validation

• CVSS: 9.6

• Weakness: Improper input validation (CWE-20).

Cisco does not provide CVE-specific impact details or exploitation prerequisites in the advisory.

Mitigation

• Upgrade Cisco Secure Workload 3.10 and earlier to 3.10.9.1.

• Upgrade Cisco Secure Workload 4.0 to 4.0.4.16.

• Prioritise the updates because no workaround is available.

• Follow normal change control and confirm the installed version after deployment.

Reference

• Cisco Secure Workload Software Security Hardening Release: August 2026

Need help?

Secure ISS can help your organisation assess affected Cisco deployments, plan upgrades and validate remediation. Call 1300 769 460 or contact the Secure ISS SOC team.