{"id":"CVE-2026-20317","title":"Cisco Secure Workload Software Security Hardening Release August 2026 - Improper Authentication Vulnerabilities","summary":"As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that ad…","severity":"critical","cvss":10,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H","cvssSource":"vendor","vendor":"Cisco","product":"Cisco Secure Workload","affected":["secure_workload 1.102.21","secure_workload 1.103.1.12","secure_workload 2.0.1.34","secure_workload 2.0.2.20","secure_workload 2.1.1.29","secure_workload 2.1.1.31","secure_workload 2.1.1.33","secure_workload 2.2.1.34","secure_workload 2.2.1.35","secure_workload 2.2.1.39","secure_workload 2.2.1.41","secure_workload 2.3.1.41","secure_workload 2.3.1.45","secure_workload 2.3.1.49","secure_workload 2.3.1.50","secure_workload 2.3.1.51","secure_workload 2.3.1.52","secure_workload 2.3.1.53","secure_workload 3.1.1.53","secure_workload 3.1.1.54","secure_workload 3.1.1.55","secure_workload 3.1.1.59","secure_workload 3.1.1.61","secure_workload 3.1.1.65","secure_workload 3.1.1.67","secure_workload 3.1.1.70","secure_workload 3.2.1.18","secure_workload 3.2.1.19","secure_workload 3.2.1.20","secure_workload 3.2.1.28","secure_workload 3.3.2.12","secure_workload 3.3.2.16","secure_workload 3.3.2.2","secure_workload 3.3.2.23","secure_workload 3.3.2.28","secure_workload 3.3.2.33","secure_workload 3.3.2.35","secure_workload 3.3.2.42","secure_workload 3.3.2.5","secure_workload 3.3.2.50"],"published":"2026-08-19","updated":"2026-08-19","sourceUpdated":"2026-08-19T16:00:00+00:00","source":"CSAF","sourceUrl":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-csw1-shSvndWP","references":[{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-csw1-shSvndWP"},{"url":"https://software.cisco.com"}],"tags":["csaf","vendor-advisory","cisco"],"epss":0.00441,"epssPercentile":0.37611,"ingestedAt":"2026-09-10T03:24:08.755Z","slug":"CVE-2026-20317","body":"## Overview\n\nAs part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.\r\n\r\nThese vulnerabilities were found during internal testing and are not known to be actively exploited. To assist customers in patching and to streamline the disclosure process, Cisco has grouped these issues by their underlying vulnerability class — Common Weakness Enumeration (CWE) — and assigned a single Common Vulnerabilities and Exposures Identifier (CVE ID) to each CWE grouping.\r\n\r\nCisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.\n\n## Vendor advisories\n\n- **cisco-sa-hardening-csw1-shSvndWP** · Cisco · affected: Cisco Secure Workload (99 versions) · updated 2026-08-19 · [advisory](https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-csw1-shSvndWP)\n\n**Cisco Secure Workload Software Security Hardening Release: August 2026**. Released 2026-08-19.\n\nAffected:\n\n- Cisco Secure Workload 1.102.21\n- Cisco Secure Workload 1.103.1.12\n- Cisco Secure Workload 2.0.1.34\n- Cisco Secure Workload 2.0.2.20\n- Cisco Secure Workload 2.1.1.29\n- Cisco Secure Workload 2.1.1.31\n- Cisco Secure Workload 2.1.1.33\n- Cisco Secure Workload 2.2.1.34\n- Cisco Secure Workload 2.2.1.35\n- Cisco Secure Workload 2.2.1.39\n- Cisco Secure Workload 2.2.1.41\n- Cisco Secure Workload 2.3.1.41\n- Cisco Secure Workload 2.3.1.45\n- Cisco Secure Workload 2.3.1.49\n- Cisco Secure Workload 2.3.1.50\n- Cisco Secure Workload 2.3.1.51\n- Cisco Secure Workload 2.3.1.52\n- Cisco Secure Workload 2.3.1.53\n- Cisco Secure Workload 3.1.1.53\n- Cisco Secure Workload 3.1.1.54\n- Cisco Secure Workload 3.1.1.55\n- Cisco Secure Workload 3.1.1.59\n- Cisco Secure Workload 3.1.1.61\n- Cisco Secure Workload 3.1.1.65\n- Cisco Secure Workload 3.1.1.67\n- Cisco Secure Workload 3.1.1.70\n- Cisco Secure Workload 3.2.1.18\n- Cisco Secure Workload 3.2.1.19\n- Cisco Secure Workload 3.2.1.20\n- Cisco Secure Workload 3.2.1.28\n- Cisco Secure Workload 3.3.2.12\n- Cisco Secure Workload 3.3.2.16\n- Cisco Secure Workload 3.3.2.2\n- Cisco Secure Workload 3.3.2.23\n- Cisco Secure Workload 3.3.2.28\n- Cisco Secure Workload 3.3.2.33\n- Cisco Secure Workload 3.3.2.35\n- Cisco Secure Workload 3.3.2.42\n- Cisco Secure Workload 3.3.2.5\n- Cisco Secure Workload 3.3.2.50\n\n## Remediation\n\nCisco has released software updates that address this vulnerability. https://software.cisco.com","depth":"midnight","depthScore":55,"depthScoreParts":{"impact":55,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}