---
id: CVE-2026-20319
title: >-
  As part of Cisco's ongoing commitment to proactive security and product
  quality, the Cisco Secure Workload engineering team has conducted a
  comprehensive internal security review
summary: >-
  As part of Cisco's ongoing commitment to proactive security and product
  quality, the Cisco Secure Workload engineering team has conducted a
  comprehensive internal security review. This review resulted in a software
  hardening release that…
severity: high
cvss: 7.5
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
cwe:
  - CWE-119
vendor: Cisco
product: Cisco Secure Workload
affected:
  - secure_workload 2.2.1.41
  - secure_workload 3.2.1.18
  - secure_workload 3.3.2.50
  - secure_workload 3.4.1.28
  - secure_workload 3.4.1.34
  - secure_workload 2.3.1.45
  - secure_workload 2.3.1.41
  - secure_workload 3.3.2.28
  - secure_workload 3.1.1.59
  - secure_workload 2.0.2.20
  - secure_workload 2.1.1.33
  - secure_workload 2.1.1.29
  - secure_workload 3.2.1.28
  - secure_workload 3.4.1.35
  - secure_workload 3.1.1.65
  - secure_workload 3.1.1.67
  - secure_workload 2.0.1.34
  - secure_workload 2.3.1.49
  - secure_workload 2.2.1.39
  - secure_workload 3.4.1.19
  - secure_workload 3.3.2.23
  - secure_workload 3.1.1.61
  - secure_workload 3.1.1.54
  - secure_workload 3.5.1.17
  - secure_workload 3.3.2.33
  - secure_workload 3.5.1.1
  - secure_workload 2.3.1.53
  - secure_workload 3.5.1.20
  - secure_workload 3.5.1.30
  - secure_workload 3.3.2.16
  - secure_workload 3.1.1.55
  - secure_workload 3.4.1.6
  - secure_workload 2.3.1.50
  - secure_workload 2.3.1.52
  - secure_workload 3.2.1.19
  - secure_workload 2.2.1.35
  - secure_workload 3.1.1.53
  - secure_workload 3.1.1.70
  - secure_workload 3.2.1.20
  - secure_workload 3.5.1.2
  - secure_workload 1.103.1.12
  - secure_workload 2.3.1.51
  - secure_workload 3.3.2.42
  - secure_workload 3.4.1.1
  - secure_workload 3.3.2.12
  - secure_workload 2.1.1.31
  - secure_workload 3.5.1.23
  - secure_workload 3.3.2.53
  - secure_workload 3.4.1.14
  - secure_workload 3.3.2.2
published: '2026-08-19'
updated: '2026-08-20'
sourceUpdated: '2026-08-20T13:01:19.947'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-20319'
references:
  - url: >-
      https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-csw1-shSvndWP
    label: psirt@cisco.com
  - url: >-
      https://www.cve.org/Media/News/item/blog/2026/06/16/Preserving-Vulnerability-Level-Identification
    label: af854a3a-2127-422b-91ae-364da2661108
tags:
  - nvd
  - cve.org
ssvc:
  exploitation: none
  automatable: 'yes'
  technicalImpact: partial
  timestamp: '2026-08-19T19:34:22.131347Z'
ingestedAt: '2026-09-13T19:07:34.638Z'
epss: 0.00467
epssPercentile: 0.37829
---

## Overview

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.

The vulnerabilities tracked by CVE-2026-20319 are related to buffer management issues that are grouped under the Common Weakness Enumeration (CWE) CWE-119.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.