NCSC-2026-0323 [1.00] [M/H] Vulnerabilities fixed in Cisco Secure Workload
Cisco has fixed multiple vulnerabilities in Cisco Secure Workload. The vulnerabilities include improper neutralization of special elements (CWE-74), improper access control (CWE-284), improper authentication (CWE-287), improper input validation (CWE-20) and buffer management issues (CWE-119). These vulnerabilities were discovered internally during a comprehensive security review by the Cisco Secure Workload engineering team. An attacker may potentially exploit these vulnerabilities depending on the specific nature of the error, such as bypassing access controls, authentication failures, or causing incorrect processing of input. The vulnerabilities have been resolved through software hardening updates.
CSIRTS triage
- What
- Multiple vulnerabilities in Cisco Secure Workload include improper authentication, access control, input validation, and buffer management issues enabling authentication bypass, privilege escalation, and incorrect input processing.
- Who is affected
- Deployments of Cisco Secure Workload running affected versions are at risk.
- Urgency
- Medium to high urgency; vulnerabilities were discovered internally and patched through hardening updates; no indication of active exploitation.
- Action
- Apply software hardening updates from Cisco addressing CVE-2026-20231, CVE-2026-20315, CVE-2026-20317, CVE-2026-20318, and CVE-2026-20319.
AI-assisted analysis generated from the source advisory — verify against the original.
⚡ Watch Cisco Secure Workload
Get an email when a new Cisco Secure Workload advisory drops — max one per day, one-click unsubscribe.
Details
Original advisory: https://advisories.ncsc.nl/advisory?id=NCSC-2026-0323
Exploitation outlook
EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.
- Low exploitation riskCVE-2026-202310.41% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 35% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-203150.32% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 25% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-203170.34% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 27% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-203180.26% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 18% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-203190.28% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 20% of all EPSS-scored CVEs.
Referenced CVEs
| CVE | CSIRTS overview | External |
|---|---|---|
| CVE-2026-20231 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-20315 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-20317 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-20318 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-20319 | coverage & exploitation status | NVD · CVE.org |
Same CVEs, other sources
How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.
- high[NEW] [high] Cisco Secure Workload: Multiple vulnerabilitiescert-bund
- unknownMultiple vulnerabilities in Cisco products (20 August 2026)cert-fr-avis
- highCVE-2026-20319: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Sec…nvd
- criticalCVE-2026-20318: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Sec…nvd
- criticalCVE-2026-20317: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Sec…nvd
- criticalCVE-2026-20315: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Sec…nvd
- criticalCVE-2026-20231: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Sec…nvd
- criticalCisco Advance Notification for Publication of August 19, 2026, Security Advisoriescisco-psirt
- criticalCisco Secure Workload Software Security Hardening Release: August 2026cisco-psirt
More from NCSC-NL Advisories
- unknownNCSC-2026-0303 [1.01] [M/H] Vulnerabilities patched in GitLab by GitLab Inc.2026-08-25
- unknownNCSC-2026-0326 [1.00] [M/H] Vulnerabilities patched in Keycloak2026-08-25
- unknownNCSC-2026-0325 [1.00] [M/H] Vulnerabilities patched in Atlassian products2026-08-24
- unknownNCSC-2026-0324 [1.00] [M/H] Vulnerability fixed in Zimbra Collaboration Suite2026-08-23
- unknownNCSC-2026-0322 [1.00] [M/H] Vulnerabilities fixed in Splunk Enterprise by Splunk2026-08-21