Cisco Secure Workload Software Security Hardening Release: August 2026
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. These vulnerabilities were found during internal testing and are not known to be actively exploited. To assist customers in patching and streamline the disclosure process, Cisco has grouped these issues by their underlying vulnerability class — Common Weakness Enumeration (CWE) — and assigned a single Common Vulnerabilities and Exposures identifier (CVE ID). Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-csw1-shSvndWP Security Impact Rating: Critical CVE: CVE-2026-20231,CVE-2026-20315,CVE-2026-20317,CVE-2026-20318,CVE-2026-20319
CSIRTS triage
- What
- Multiple internally discovered vulnerabilities in Secure Workload software grouped by CWE classification enabling code execution, privilege escalation, and information disclosure.
- Who is affected
- Cisco Secure Workload deployments are affected.
- Urgency
- Critical urgency; Cisco has issued critical severity advisory and software hardening release.
- Action
- Apply Cisco Secure Workload software updates addressing CVE-2026-20231, CVE-2026-20315, CVE-2026-20317, CVE-2026-20318, and CVE-2026-20319.
AI-assisted analysis generated from the source advisory — verify against the original.
⚡ Watch Secure Workload
Get an email when a new Secure Workload advisory drops — max one per day, one-click unsubscribe.
Details
Exploitation outlook
EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.
- Low exploitation riskCVE-2026-202310.50% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 41% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-203150.41% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 35% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-203170.44% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 37% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-203180.35% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 28% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-203190.37% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 30% of all EPSS-scored CVEs.
Referenced CVEs
| CVE | CSIRTS overview | External |
|---|---|---|
| CVE-2026-20231 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-20315 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-20317 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-20318 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-20319 | coverage & exploitation status | NVD · CVE.org |
Same CVEs, other sources
How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.
- unknownNCSC-2026-0323 [1.00] [M/H] Kwetsbaarheden verholpen in Cisco Secure Workloadncsc-nl
- high[NEW] [high] Cisco Secure Workload: Multiple vulnerabilitiescert-bund
- unknownMultiple vulnerabilities in Cisco products (20 August 2026)cert-fr-avis
- highCVE-2026-20319: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Sec…nvd
- criticalCVE-2026-20318: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Sec…nvd
- criticalCVE-2026-20317: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Sec…nvd
- criticalCVE-2026-20315: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Sec…nvd
- criticalCVE-2026-20231: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Sec…nvd
- criticalCisco Advance Notification for Publication of August 19, 2026, Security Advisoriescisco-psirt
Recent advisories for Cisco Secure Workload
A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.
- unknownNCSC-2026-0323 [1.00] [M/H] Kwetsbaarheden verholpen in Cisco Secure Workloadncsc-nl · 2026-08-21
- high[NEW] [high] Cisco Secure Workload: Multiple vulnerabilitiescert-bund · 2026-08-20
- highCVE-2026-20319: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Sec…nvd · 2026-08-19
- criticalCVE-2026-20318: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Sec…nvd · 2026-08-19
- criticalCVE-2026-20317: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Sec…nvd · 2026-08-19
- criticalCVE-2026-20315: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Sec…nvd · 2026-08-19
More from Cisco Security Advisories
- criticalCisco IOS XR Software Security Hardening Release: September 20262026-09-11
- criticalCisco Secure Firewall Management Center Software Authentication Bypass Vulnerability2026-09-09
- unknownCisco Advance Notification for Publication of September 16, 2026, Security Advisories2026-09-09
- highCisco UCS and UCS-Based Appliances UEFI Shell Secure Boot Bypass Vulnerability2026-09-08
- mediumCisco Secure Email Secure/Multipurpose Internet Mail Extensions Ciphertext Decryption Vulnerabilities2026-09-08