[NEW] [high] Cisco Secure Workload: Multiple vulnerabilities
A remote anonymous attacker can exploit multiple vulnerabilities in Cisco Secure Workload to execute arbitrary code, bypass security measures, escalate privileges, manipulate or disclose data, and potentially cause memory corruption and denial-of-service conditions.
CSIRTS triage
- What
- Multiple vulnerabilities allow remote anonymous attackers to execute arbitrary code, bypass security measures, escalate privileges, manipulate or disclose data, and cause memory corruption or denial-of-service conditions.
- Who is affected
- All deployments of Cisco Secure Workload.
- Urgency
- High priority due to remote anonymous exploitability and severity of impacts including RCE and privilege escalation.
- Action
- Apply vendor security updates for CVE-2026-20231, CVE-2026-20315, CVE-2026-20317, CVE-2026-20318, CVE-2026-20319 immediately.
AI-assisted analysis generated from the source advisory — verify against the original.
⚡ Watch Secure Workload
Get an email when a new Secure Workload advisory drops — max one per day, one-click unsubscribe.
Details
Original advisory: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2932
Exploitation outlook
EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.
- Low exploitation riskCVE-2026-202310.41% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 35% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-203150.32% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 25% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-203170.34% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 27% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-203180.26% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 18% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-203190.28% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 20% of all EPSS-scored CVEs.
Referenced CVEs
| CVE | CSIRTS overview | External |
|---|---|---|
| CVE-2026-20231 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-20315 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-20317 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-20318 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-20319 | coverage & exploitation status | NVD · CVE.org |
Same CVEs, other sources
How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.
- unknownNCSC-2026-0323 [1.00] [M/H] Vulnerabilities fixed in Cisco Secure Workloadncsc-nl
- unknownMultiple vulnerabilities in Cisco products (20 August 2026)cert-fr-avis
- highCVE-2026-20319: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Sec…nvd
- criticalCVE-2026-20318: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Sec…nvd
- criticalCVE-2026-20317: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Sec…nvd
- criticalCVE-2026-20315: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Sec…nvd
- criticalCVE-2026-20231: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Sec…nvd
- criticalCisco Advance Notification for Publication of August 19, 2026, Security Advisoriescisco-psirt
- criticalCisco Secure Workload Software Security Hardening Release: August 2026cisco-psirt
Recent advisories for Cisco Secure Workload
A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.
- unknownNCSC-2026-0323 [1.00] [M/H] Vulnerabilities fixed in Cisco Secure Workloadncsc-nl · 2026-08-21
- highCVE-2026-20319: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Sec…nvd · 2026-08-19
- criticalCVE-2026-20318: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Sec…nvd · 2026-08-19
- criticalCVE-2026-20317: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Sec…nvd · 2026-08-19
- criticalCVE-2026-20315: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Sec…nvd · 2026-08-19
- criticalCVE-2026-20231: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Sec…nvd · 2026-08-19
More from CERT-Bund (BSI) Security Advisories
- high[NEW] [high] Linux Kernel: Multiple vulnerabilities2026-08-25
- medium[NEW] [medium] libTIFF: Multiple Vulnerabilities2026-08-25
- high[NEW] [high] Contao: Multiple Vulnerabilities2026-08-25
- medium[NEW] [medium] Django: Multiple Vulnerabilities2026-08-25
- high[NEW] [high] Red Hat Enterprise Linux (Apicurio Registry): Multiple Vulnerabilities2026-08-25