{"id":"CVE-2026-20319","title":"As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review","summary":"As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that…","severity":"high","cvss":7.5,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-119"],"vendor":"Cisco","product":"Cisco Secure Workload","affected":["secure_workload 2.2.1.41","secure_workload 3.2.1.18","secure_workload 3.3.2.50","secure_workload 3.4.1.28","secure_workload 3.4.1.34","secure_workload 2.3.1.45","secure_workload 2.3.1.41","secure_workload 3.3.2.28","secure_workload 3.1.1.59","secure_workload 2.0.2.20","secure_workload 2.1.1.33","secure_workload 2.1.1.29","secure_workload 3.2.1.28","secure_workload 3.4.1.35","secure_workload 3.1.1.65","secure_workload 3.1.1.67","secure_workload 2.0.1.34","secure_workload 2.3.1.49","secure_workload 2.2.1.39","secure_workload 3.4.1.19","secure_workload 3.3.2.23","secure_workload 3.1.1.61","secure_workload 3.1.1.54","secure_workload 3.5.1.17","secure_workload 3.3.2.33","secure_workload 3.5.1.1","secure_workload 2.3.1.53","secure_workload 3.5.1.20","secure_workload 3.5.1.30","secure_workload 3.3.2.16","secure_workload 3.1.1.55","secure_workload 3.4.1.6","secure_workload 2.3.1.50","secure_workload 2.3.1.52","secure_workload 3.2.1.19","secure_workload 2.2.1.35","secure_workload 3.1.1.53","secure_workload 3.1.1.70","secure_workload 3.2.1.20","secure_workload 3.5.1.2","secure_workload 1.103.1.12","secure_workload 2.3.1.51","secure_workload 3.3.2.42","secure_workload 3.4.1.1","secure_workload 3.3.2.12","secure_workload 2.1.1.31","secure_workload 3.5.1.23","secure_workload 3.3.2.53","secure_workload 3.4.1.14","secure_workload 3.3.2.2"],"published":"2026-08-19","updated":"2026-08-20","sourceUpdated":"2026-08-20T13:01:19.947","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-20319","references":[{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-csw1-shSvndWP","label":"psirt@cisco.com"},{"url":"https://www.cve.org/Media/News/item/blog/2026/06/16/Preserving-Vulnerability-Level-Identification","label":"af854a3a-2127-422b-91ae-364da2661108"}],"tags":["nvd","cve.org"],"ssvc":{"exploitation":"none","automatable":"yes","technicalImpact":"partial","timestamp":"2026-08-19T19:34:22.131347Z"},"ingestedAt":"2026-09-13T19:07:34.638Z","epss":0.00367,"epssPercentile":0.30409,"slug":"CVE-2026-20319","body":"## Overview\n\nAs part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.\r\n\r\nThe vulnerabilities tracked by CVE-2026-20319 are related to buffer management issues that are grouped under the Common Weakness Enumeration (CWE) CWE-119.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":41,"depthScoreParts":{"impact":41.3,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}