Vulnerability-Lookup

CVE-2026-20317 (GCVE-0-2026-20317)

Vulnerability from cvelistv5 – Published: 2026-08-19 16:19 – Updated: 2026-08-20 15:57

Title

Cisco Secure Workload Software Security Hardening Release August 2026 - Improper Authentication Vulnerabilities

Summary

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20317 are related to improper authentication issues that are grouped under the Common Weakness Enumeration (CWE) CWE-287.

Severity

10 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-20 15:40 UTC

CWE

CWE-287 - Improper Authentication

Assigner

cisco mitre root

References

2 references

URL	Tags
https://sec.cloudapps.cisco.com/security/center/c…
https://www.cve.org/Media/News/item/blog/2026/06/…

Impacted products

1 product

Vendor	Product	Version	CPE status
Cisco	Cisco Secure Workload	Affected: 2.2.1.41 Affected: 3.2.1.18 Affected: 3.3.2.50 Affected: 3.4.1.28 Affected: 3.4.1.34 Affected: 2.3.1.45 Affected: 2.3.1.41 Affected: 3.3.2.28 Affected: 3.1.1.59 Affected: 2.0.2.20 Affected: 2.1.1.33 Affected: 2.1.1.29 Affected: 3.2.1.28 Affected: 3.4.1.35 Affected: 3.1.1.65 Affected: 3.1.1.67 Affected: 2.0.1.34 Affected: 2.3.1.49 Affected: 2.2.1.39 Affected: 3.4.1.19 Affected: 3.3.2.23 Affected: 3.1.1.61 Affected: 3.1.1.54 Affected: 3.5.1.17 Affected: 3.3.2.33 Affected: 3.5.1.1 Affected: 2.3.1.53 Affected: 3.5.1.20 Affected: 3.5.1.30 Affected: 3.3.2.16 Affected: 3.1.1.55 Affected: 3.4.1.6 Affected: 2.3.1.50 Affected: 2.3.1.52 Affected: 3.2.1.19 Affected: 2.2.1.35 Affected: 3.1.1.53 Affected: 3.1.1.70 Affected: 3.2.1.20 Affected: 3.5.1.2 Affected: 1.103.1.12 Affected: 2.3.1.51 Affected: 3.3.2.42 Affected: 3.4.1.1 Affected: 3.3.2.12 Affected: 2.1.1.31 Affected: 3.5.1.23 Affected: 3.3.2.53 Affected: 3.4.1.14 Affected: 3.3.2.2 Affected: 3.4.1.20 Affected: 3.3.2.35 Affected: 2.2.1.34 Affected: 1.102.21 Affected: 3.3.2.5 Affected: 3.5.1.31 Affected: 3.6.1.5 Affected: 3.2.1.31 Affected: 3.5.1.37 Affected: 3.4.1.40 Affected: 3.6.1.17 Affected: 3.6.1.21 Affected: 3.2.1.32 Affected: 3.2.1.33 Affected: 3.6.1.35 Affected: 3.6.1.36 Affected: 3.7.1.5 Affected: 3.6.1.47 Affected: 3.7.1.22 Affected: 3.6.1.52 Affected: 3.7.1.39 Affected: 3.8.1.1 Affected: 3.7.1.51 Affected: 3.8.1.19 Affected: 3.8.1.36 Affected: 3.7.1.59 Affected: 3.8.1.39 Affected: 3.9.1.1 Affected: 3.9.1.10 Affected: 3.9.1.24 Affected: 3.9.1.25 Affected: 3.9.1.28 Affected: 3.9.1.38 Affected: 3.8.1.53 Affected: 3.9.1.52 Affected: 3.10.1.1 Affected: 3.9.1.64 Affected: 3.10.2.11 Affected: 3.9.1.66 Affected: 3.10.3.19 Affected: 3.9.1.69 Affected: 3.10.4.8 Affected: 3.10.5.6 Affected: 4.0.1.1 Affected: 4.0.2.4 Affected: 4.0.2.5 Affected: 3.10.6.3 Affected: 3.10.7.4 Affected: 4.0.3.13 Affected: 4.0.3.17 Affected: 3.10.8.3	guessed

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "descriptions": [
          {
            "lang": "en",
            "value": "The CVE Program recognizes that this CVE Record provides vulnerability information that a Supplier CNA believes is very important to consumers. The CVE Program has flagged this CVE Record as it assigns a single CVE ID to a collection of individual vulnerabilities which does not align with CVE\u0027s \"one vulnerability, one ID\" principle, and therefore provides incomplete information. For further clarification, please see the CVE Program\u0027s blog, \"Preserving Vulnerability-Level Identification\" linked below. Details within the CNA container below are viewable by clicking on the CNA name."
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-19T18:31:50.971Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://www.cve.org/Media/News/item/blog/2026/06/16/Preserving-Vulnerability-Level-Identification"
          }
        ],
        "tags": [
          "x_bundling-flagged-by-CVE-Program"
        ]
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-20317",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-20T15:40:41.775734Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-20T15:57:08.173Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "Cisco Secure Workload",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "2.2.1.41"
            },
            {
              "status": "affected",
              "version": "3.2.1.18"
            },
            {
              "status": "affected",
              "version": "3.3.2.50"
            },
            {
              "status": "affected",
              "version": "3.4.1.28"
            },
            {
              "status": "affected",
              "version": "3.4.1.34"
            },
            {
              "status": "affected",
              "version": "2.3.1.45"
            },
            {
              "status": "affected",
              "version": "2.3.1.41"
            },
            {
              "status": "affected",
              "version": "3.3.2.28"
            },
            {
              "status": "affected",
              "version": "3.1.1.59"
            },
            {
              "status": "affected",
              "version": "2.0.2.20"
            },
            {
              "status": "affected",
              "version": "2.1.1.33"
            },
            {
              "status": "affected",
              "version": "2.1.1.29"
            },
            {
              "status": "affected",
              "version": "3.2.1.28"
            },
            {
              "status": "affected",
              "version": "3.4.1.35"
            },
            {
              "status": "affected",
              "version": "3.1.1.65"
            },
            {
              "status": "affected",
              "version": "3.1.1.67"
            },
            {
              "status": "affected",
              "version": "2.0.1.34"
            },
            {
              "status": "affected",
              "version": "2.3.1.49"
            },
            {
              "status": "affected",
              "version": "2.2.1.39"
            },
            {
              "status": "affected",
              "version": "3.4.1.19"
            },
            {
              "status": "affected",
              "version": "3.3.2.23"
            },
            {
              "status": "affected",
              "version": "3.1.1.61"
            },
            {
              "status": "affected",
              "version": "3.1.1.54"
            },
            {
              "status": "affected",
              "version": "3.5.1.17"
            },
            {
              "status": "affected",
              "version": "3.3.2.33"
            },
            {
              "status": "affected",
              "version": "3.5.1.1"
            },
            {
              "status": "affected",
              "version": "2.3.1.53"
            },
            {
              "status": "affected",
              "version": "3.5.1.20"
            },
            {
              "status": "affected",
              "version": "3.5.1.30"
            },
            {
              "status": "affected",
              "version": "3.3.2.16"
            },
            {
              "status": "affected",
              "version": "3.1.1.55"
            },
            {
              "status": "affected",
              "version": "3.4.1.6"
            },
            {
              "status": "affected",
              "version": "2.3.1.50"
            },
            {
              "status": "affected",
              "version": "2.3.1.52"
            },
            {
              "status": "affected",
              "version": "3.2.1.19"
            },
            {
              "status": "affected",
              "version": "2.2.1.35"
            },
            {
              "status": "affected",
              "version": "3.1.1.53"
            },
            {
              "status": "affected",
              "version": "3.1.1.70"
            },
            {
              "status": "affected",
              "version": "3.2.1.20"
            },
            {
              "status": "affected",
              "version": "3.5.1.2"
            },
            {
              "status": "affected",
              "version": "1.103.1.12"
            },
            {
              "status": "affected",
              "version": "2.3.1.51"
            },
            {
              "status": "affected",
              "version": "3.3.2.42"
            },
            {
              "status": "affected",
              "version": "3.4.1.1"
            },
            {
              "status": "affected",
              "version": "3.3.2.12"
            },
            {
              "status": "affected",
              "version": "2.1.1.31"
            },
            {
              "status": "affected",
              "version": "3.5.1.23"
            },
            {
              "status": "affected",
              "version": "3.3.2.53"
            },
            {
              "status": "affected",
              "version": "3.4.1.14"
            },
            {
              "status": "affected",
              "version": "3.3.2.2"
            },
            {
              "status": "affected",
              "version": "3.4.1.20"
            },
            {
              "status": "affected",
              "version": "3.3.2.35"
            },
            {
              "status": "affected",
              "version": "2.2.1.34"
            },
            {
              "status": "affected",
              "version": "1.102.21"
            },
            {
              "status": "affected",
              "version": "3.3.2.5"
            },
            {
              "status": "affected",
              "version": "3.5.1.31"
            },
            {
              "status": "affected",
              "version": "3.6.1.5"
            },
            {
              "status": "affected",
              "version": "3.2.1.31"
            },
            {
              "status": "affected",
              "version": "3.5.1.37"
            },
            {
              "status": "affected",
              "version": "3.4.1.40"
            },
            {
              "status": "affected",
              "version": "3.6.1.17"
            },
            {
              "status": "affected",
              "version": "3.6.1.21"
            },
            {
              "status": "affected",
              "version": "3.2.1.32"
            },
            {
              "status": "affected",
              "version": "3.2.1.33"
            },
            {
              "status": "affected",
              "version": "3.6.1.35"
            },
            {
              "status": "affected",
              "version": "3.6.1.36"
            },
            {
              "status": "affected",
              "version": "3.7.1.5"
            },
            {
              "status": "affected",
              "version": "3.6.1.47"
            },
            {
              "status": "affected",
              "version": "3.7.1.22"
            },
            {
              "status": "affected",
              "version": "3.6.1.52"
            },
            {
              "status": "affected",
              "version": "3.7.1.39"
            },
            {
              "status": "affected",
              "version": "3.8.1.1"
            },
            {
              "status": "affected",
              "version": "3.7.1.51"
            },
            {
              "status": "affected",
              "version": "3.8.1.19"
            },
            {
              "status": "affected",
              "version": "3.8.1.36"
            },
            {
              "status": "affected",
              "version": "3.7.1.59"
            },
            {
              "status": "affected",
              "version": "3.8.1.39"
            },
            {
              "status": "affected",
              "version": "3.9.1.1"
            },
            {
              "status": "affected",
              "version": "3.9.1.10"
            },
            {
              "status": "affected",
              "version": "3.9.1.24"
            },
            {
              "status": "affected",
              "version": "3.9.1.25"
            },
            {
              "status": "affected",
              "version": "3.9.1.28"
            },
            {
              "status": "affected",
              "version": "3.9.1.38"
            },
            {
              "status": "affected",
              "version": "3.8.1.53"
            },
            {
              "status": "affected",
              "version": "3.9.1.52"
            },
            {
              "status": "affected",
              "version": "3.10.1.1"
            },
            {
              "status": "affected",
              "version": "3.9.1.64"
            },
            {
              "status": "affected",
              "version": "3.10.2.11"
            },
            {
              "status": "affected",
              "version": "3.9.1.66"
            },
            {
              "status": "affected",
              "version": "3.10.3.19"
            },
            {
              "status": "affected",
              "version": "3.9.1.69"
            },
            {
              "status": "affected",
              "version": "3.10.4.8"
            },
            {
              "status": "affected",
              "version": "3.10.5.6"
            },
            {
              "status": "affected",
              "version": "4.0.1.1"
            },
            {
              "status": "affected",
              "version": "4.0.2.4"
            },
            {
              "status": "affected",
              "version": "4.0.2.5"
            },
            {
              "status": "affected",
              "version": "3.10.6.3"
            },
            {
              "status": "affected",
              "version": "3.10.7.4"
            },
            {
              "status": "affected",
              "version": "4.0.3.13"
            },
            {
              "status": "affected",
              "version": "4.0.3.17"
            },
            {
              "status": "affected",
              "version": "3.10.8.3"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "As part of Cisco\u0027s ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.\r\n\r\nThe vulnerabilities tracked by CVE-2026-20317 are related to improper authentication issues that are grouped under the Common Weakness Enumeration (CWE) CWE-287."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 10,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H",
            "version": "3.1"
          },
          "format": "cvssV3_1"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-287",
              "description": "Improper Authentication",
              "lang": "en",
              "type": "cwe"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-19T16:19:28.234Z",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "cisco-sa-hardening-csw1-shSvndWP",
          "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-csw1-shSvndWP"
        }
      ],
      "source": {
        "advisory": "cisco-sa-hardening-csw1-shSvndWP",
        "defects": [
          "CSCwu12926"
        ],
        "discovery": "INTERNAL"
      },
      "title": "Cisco Secure Workload Software Security Hardening Release August 2026 - Improper Authentication Vulnerabilities"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2026-20317",
    "datePublished": "2026-08-19T16:19:28.234Z",
    "dateReserved": "2025-10-08T11:59:15.410Z",
    "dateUpdated": "2026-08-20T15:57:08.173Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-20317",
      "date": "2026-08-21",
      "epss": "0.00343",
      "percentile": "0.27511"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2026-20317\",\"sourceIdentifier\":\"psirt@cisco.com\",\"published\":\"2026-08-19T17:18:39.963\",\"lastModified\":\"2026-08-20T16:17:21.277\",\"vulnStatus\":\"Awaiting Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"As part of Cisco\u0027s ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.\\r\\n\\r\\nThe vulnerabilities tracked by CVE-2026-20317 are related to improper authentication issues that are grouped under the Common Weakness Enumeration (CWE) CWE-287.\"}],\"affected\":[{\"source\":\"psirt@cisco.com\",\"affectedData\":[{\"vendor\":\"Cisco\",\"product\":\"Cisco Secure Workload\",\"defaultStatus\":\"unknown\",\"versions\":[{\"version\":\"2.2.1.41\",\"status\":\"affected\"},{\"version\":\"3.2.1.18\",\"status\":\"affected\"},{\"version\":\"3.3.2.50\",\"status\":\"affected\"},{\"version\":\"3.4.1.28\",\"status\":\"affected\"},{\"version\":\"3.4.1.34\",\"status\":\"affected\"},{\"version\":\"2.3.1.45\",\"status\":\"affected\"},{\"version\":\"2.3.1.41\",\"status\":\"affected\"},{\"version\":\"3.3.2.28\",\"status\":\"affected\"},{\"version\":\"3.1.1.59\",\"status\":\"affected\"},{\"version\":\"2.0.2.20\",\"status\":\"affected\"},{\"version\":\"2.1.1.33\",\"status\":\"affected\"},{\"version\":\"2.1.1.29\",\"status\":\"affected\"},{\"version\":\"3.2.1.28\",\"status\":\"affected\"},{\"version\":\"3.4.1.35\",\"status\":\"affected\"},{\"version\":\"3.1.1.65\",\"status\":\"affected\"},{\"version\":\"3.1.1.67\",\"status\":\"affected\"},{\"version\":\"2.0.1.34\",\"status\":\"affected\"},{\"version\":\"2.3.1.49\",\"status\":\"affected\"},{\"version\":\"2.2.1.39\",\"status\":\"affected\"},{\"version\":\"3.4.1.19\",\"status\":\"affected\"},{\"version\":\"3.3.2.23\",\"status\":\"affected\"},{\"version\":\"3.1.1.61\",\"status\":\"affected\"},{\"version\":\"3.1.1.54\",\"status\":\"affected\"},{\"version\":\"3.5.1.17\",\"status\":\"affected\"},{\"version\":\"3.3.2.33\",\"status\":\"affected\"},{\"version\":\"3.5.1.1\",\"status\":\"affected\"},{\"version\":\"2.3.1.53\",\"status\":\"affected\"},{\"version\":\"3.5.1.20\",\"status\":\"affected\"},{\"version\":\"3.5.1.30\",\"status\":\"affected\"},{\"version\":\"3.3.2.16\",\"status\":\"affected\"},{\"version\":\"3.1.1.55\",\"status\":\"affected\"},{\"version\":\"3.4.1.6\",\"status\":\"affected\"},{\"version\":\"2.3.1.50\",\"status\":\"affected\"},{\"version\":\"2.3.1.52\",\"status\":\"affected\"},{\"version\":\"3.2.1.19\",\"status\":\"affected\"},{\"version\":\"2.2.1.35\",\"status\":\"affected\"},{\"version\":\"3.1.1.53\",\"status\":\"affected\"},{\"version\":\"3.1.1.70\",\"status\":\"affected\"},{\"version\":\"3.2.1.20\",\"status\":\"affected\"},{\"version\":\"3.5.1.2\",\"status\":\"affected\"},{\"version\":\"1.103.1.12\",\"status\":\"affected\"},{\"version\":\"2.3.1.51\",\"status\":\"affected\"},{\"version\":\"3.3.2.42\",\"status\":\"affected\"},{\"version\":\"3.4.1.1\",\"status\":\"affected\"},{\"version\":\"3.3.2.12\",\"status\":\"affected\"},{\"version\":\"2.1.1.31\",\"status\":\"affected\"},{\"version\":\"3.5.1.23\",\"status\":\"affected\"},{\"version\":\"3.3.2.53\",\"status\":\"affected\"},{\"version\":\"3.4.1.14\",\"status\":\"affected\"},{\"version\":\"3.3.2.2\",\"status\":\"affected\"},{\"version\":\"3.4.1.20\",\"status\":\"affected\"},{\"version\":\"3.3.2.35\",\"status\":\"affected\"},{\"version\":\"2.2.1.34\",\"status\":\"affected\"},{\"version\":\"1.102.21\",\"status\":\"affected\"},{\"version\":\"3.3.2.5\",\"status\":\"affected\"},{\"version\":\"3.5.1.31\",\"status\":\"affected\"},{\"version\":\"3.6.1.5\",\"status\":\"affected\"},{\"version\":\"3.2.1.31\",\"status\":\"affected\"},{\"version\":\"3.5.1.37\",\"status\":\"affected\"},{\"version\":\"3.4.1.40\",\"status\":\"affected\"},{\"version\":\"3.6.1.17\",\"status\":\"affected\"},{\"version\":\"3.6.1.21\",\"status\":\"affected\"},{\"version\":\"3.2.1.32\",\"status\":\"affected\"},{\"version\":\"3.2.1.33\",\"status\":\"affected\"},{\"version\":\"3.6.1.35\",\"status\":\"affected\"},{\"version\":\"3.6.1.36\",\"status\":\"affected\"},{\"version\":\"3.7.1.5\",\"status\":\"affected\"},{\"version\":\"3.6.1.47\",\"status\":\"affected\"},{\"version\":\"3.7.1.22\",\"status\":\"affected\"},{\"version\":\"3.6.1.52\",\"status\":\"affected\"},{\"version\":\"3.7.1.39\",\"status\":\"affected\"},{\"version\":\"3.8.1.1\",\"status\":\"affected\"},{\"version\":\"3.7.1.51\",\"status\":\"affected\"},{\"version\":\"3.8.1.19\",\"status\":\"affected\"},{\"version\":\"3.8.1.36\",\"status\":\"affected\"},{\"version\":\"3.7.1.59\",\"status\":\"affected\"},{\"version\":\"3.8.1.39\",\"status\":\"affected\"},{\"version\":\"3.9.1.1\",\"status\":\"affected\"},{\"version\":\"3.9.1.10\",\"status\":\"affected\"},{\"version\":\"3.9.1.24\",\"status\":\"affected\"},{\"version\":\"3.9.1.25\",\"status\":\"affected\"},{\"version\":\"3.9.1.28\",\"status\":\"affected\"},{\"version\":\"3.9.1.38\",\"status\":\"affected\"},{\"version\":\"3.8.1.53\",\"status\":\"affected\"},{\"version\":\"3.9.1.52\",\"status\":\"affected\"},{\"version\":\"3.10.1.1\",\"status\":\"affected\"},{\"version\":\"3.9.1.64\",\"status\":\"affected\"},{\"version\":\"3.10.2.11\",\"status\":\"affected\"},{\"version\":\"3.9.1.66\",\"status\":\"affected\"},{\"version\":\"3.10.3.19\",\"status\":\"affected\"},{\"version\":\"3.9.1.69\",\"status\":\"affected\"},{\"version\":\"3.10.4.8\",\"status\":\"affected\"},{\"version\":\"3.10.5.6\",\"status\":\"affected\"},{\"version\":\"4.0.1.1\",\"status\":\"affected\"},{\"version\":\"4.0.2.4\",\"status\":\"affected\"},{\"version\":\"4.0.2.5\",\"status\":\"affected\"},{\"version\":\"3.10.6.3\",\"status\":\"affected\"},{\"version\":\"3.10.7.4\",\"status\":\"affected\"},{\"version\":\"4.0.3.13\",\"status\":\"affected\"},{\"version\":\"4.0.3.17\",\"status\":\"affected\"},{\"version\":\"3.10.8.3\",\"status\":\"affected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"psirt@cisco.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H\",\"baseScore\":10.0,\"baseSeverity\":\"CRITICAL\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":5.8}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-08-20T15:40:41.775734Z\",\"id\":\"CVE-2026-20317\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"yes\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"psirt@cisco.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-287\"}]}],\"references\":[{\"url\":\"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-csw1-shSvndWP\",\"source\":\"psirt@cisco.com\"},{\"url\":\"https://www.cve.org/Media/News/item/blog/2026/06/16/Preserving-Vulnerability-Level-Identification\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}",
    "vulnrichment": {
      "containers": "{\"adp\": [{\"tags\": [\"x_bundling-flagged-by-CVE-Program\"], \"references\": [{\"url\": \"https://www.cve.org/Media/News/item/blog/2026/06/16/Preserving-Vulnerability-Level-Identification\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"The CVE Program recognizes that this CVE Record provides vulnerability information that a Supplier CNA believes is very important to consumers. The CVE Program has flagged this CVE Record as it assigns a single CVE ID to a collection of individual vulnerabilities which does not align with CVE\u0027s \\\"one vulnerability, one ID\\\" principle, and therefore provides incomplete information. For further clarification, please see the CVE Program\u0027s blog, \\\"Preserving Vulnerability-Level Identification\\\" linked below. Details within the CNA container below are viewable by clicking on the CNA name.\"}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2026-08-19T18:31:50.971Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-20317\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-08-20T15:40:41.775734Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-08-20T15:51:20.935Z\"}}], \"cna\": {\"title\": \"Cisco Secure Workload Software Security Hardening Release August 2026 - Improper Authentication Vulnerabilities\", \"source\": {\"defects\": [\"CSCwu12926\"], \"advisory\": \"cisco-sa-hardening-csw1-shSvndWP\", \"discovery\": \"INTERNAL\"}, \"metrics\": [{\"format\": \"cvssV3_1\", \"cvssV3_1\": {\"scope\": \"CHANGED\", \"version\": \"3.1\", \"baseScore\": 10, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"CRITICAL\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"NONE\"}}], \"affected\": [{\"vendor\": \"Cisco\", \"product\": \"Cisco Secure Workload\", \"versions\": [{\"status\": \"affected\", \"version\": \"2.2.1.41\"}, {\"status\": \"affected\", \"version\": \"3.2.1.18\"}, {\"status\": \"affected\", \"version\": \"3.3.2.50\"}, {\"status\": \"affected\", \"version\": \"3.4.1.28\"}, {\"status\": \"affected\", \"version\": \"3.4.1.34\"}, {\"status\": \"affected\", \"version\": \"2.3.1.45\"}, {\"status\": \"affected\", \"version\": \"2.3.1.41\"}, {\"status\": \"affected\", \"version\": \"3.3.2.28\"}, {\"status\": \"affected\", \"version\": \"3.1.1.59\"}, {\"status\": \"affected\", \"version\": \"2.0.2.20\"}, {\"status\": \"affected\", \"version\": \"2.1.1.33\"}, {\"status\": \"affected\", \"version\": \"2.1.1.29\"}, {\"status\": \"affected\", \"version\": \"3.2.1.28\"}, {\"status\": \"affected\", \"version\": \"3.4.1.35\"}, {\"status\": \"affected\", \"version\": \"3.1.1.65\"}, {\"status\": \"affected\", \"version\": \"3.1.1.67\"}, {\"status\": \"affected\", \"version\": \"2.0.1.34\"}, {\"status\": \"affected\", \"version\": \"2.3.1.49\"}, {\"status\": \"affected\", \"version\": \"2.2.1.39\"}, {\"status\": \"affected\", \"version\": \"3.4.1.19\"}, {\"status\": \"affected\", \"version\": \"3.3.2.23\"}, {\"status\": \"affected\", \"version\": \"3.1.1.61\"}, {\"status\": \"affected\", \"version\": \"3.1.1.54\"}, {\"status\": \"affected\", \"version\": \"3.5.1.17\"}, {\"status\": \"affected\", \"version\": \"3.3.2.33\"}, {\"status\": \"affected\", \"version\": \"3.5.1.1\"}, {\"status\": \"affected\", \"version\": \"2.3.1.53\"}, {\"status\": \"affected\", \"version\": \"3.5.1.20\"}, {\"status\": \"affected\", \"version\": \"3.5.1.30\"}, {\"status\": \"affected\", \"version\": \"3.3.2.16\"}, {\"status\": \"affected\", \"version\": \"3.1.1.55\"}, {\"status\": \"affected\", \"version\": \"3.4.1.6\"}, {\"status\": \"affected\", \"version\": \"2.3.1.50\"}, {\"status\": \"affected\", \"version\": \"2.3.1.52\"}, {\"status\": \"affected\", \"version\": \"3.2.1.19\"}, {\"status\": \"affected\", \"version\": \"2.2.1.35\"}, {\"status\": \"affected\", \"version\": \"3.1.1.53\"}, {\"status\": \"affected\", \"version\": \"3.1.1.70\"}, {\"status\": \"affected\", \"version\": \"3.2.1.20\"}, {\"status\": \"affected\", \"version\": \"3.5.1.2\"}, {\"status\": \"affected\", \"version\": \"1.103.1.12\"}, {\"status\": \"affected\", \"version\": \"2.3.1.51\"}, {\"status\": \"affected\", \"version\": \"3.3.2.42\"}, {\"status\": \"affected\", \"version\": \"3.4.1.1\"}, {\"status\": \"affected\", \"version\": \"3.3.2.12\"}, {\"status\": \"affected\", \"version\": \"2.1.1.31\"}, {\"status\": \"affected\", \"version\": \"3.5.1.23\"}, {\"status\": \"affected\", \"version\": \"3.3.2.53\"}, {\"status\": \"affected\", \"version\": \"3.4.1.14\"}, {\"status\": \"affected\", \"version\": \"3.3.2.2\"}, {\"status\": \"affected\", \"version\": \"3.4.1.20\"}, {\"status\": \"affected\", \"version\": \"3.3.2.35\"}, {\"status\": \"affected\", \"version\": \"2.2.1.34\"}, {\"status\": \"affected\", \"version\": \"1.102.21\"}, {\"status\": \"affected\", \"version\": \"3.3.2.5\"}, {\"status\": \"affected\", \"version\": \"3.5.1.31\"}, {\"status\": \"affected\", \"version\": \"3.6.1.5\"}, {\"status\": \"affected\", \"version\": \"3.2.1.31\"}, {\"status\": \"affected\", \"version\": \"3.5.1.37\"}, {\"status\": \"affected\", \"version\": \"3.4.1.40\"}, {\"status\": \"affected\", \"version\": \"3.6.1.17\"}, {\"status\": \"affected\", \"version\": \"3.6.1.21\"}, {\"status\": \"affected\", \"version\": \"3.2.1.32\"}, {\"status\": \"affected\", \"version\": \"3.2.1.33\"}, {\"status\": \"affected\", \"version\": \"3.6.1.35\"}, {\"status\": \"affected\", \"version\": \"3.6.1.36\"}, {\"status\": \"affected\", \"version\": \"3.7.1.5\"}, {\"status\": \"affected\", \"version\": \"3.6.1.47\"}, {\"status\": \"affected\", \"version\": \"3.7.1.22\"}, {\"status\": \"affected\", \"version\": \"3.6.1.52\"}, {\"status\": \"affected\", \"version\": \"3.7.1.39\"}, {\"status\": \"affected\", \"version\": \"3.8.1.1\"}, {\"status\": \"affected\", \"version\": \"3.7.1.51\"}, {\"status\": \"affected\", \"version\": \"3.8.1.19\"}, {\"status\": \"affected\", \"version\": \"3.8.1.36\"}, {\"status\": \"affected\", \"version\": \"3.7.1.59\"}, {\"status\": \"affected\", \"version\": \"3.8.1.39\"}, {\"status\": \"affected\", \"version\": \"3.9.1.1\"}, {\"status\": \"affected\", \"version\": \"3.9.1.10\"}, {\"status\": \"affected\", \"version\": \"3.9.1.24\"}, {\"status\": \"affected\", \"version\": \"3.9.1.25\"}, {\"status\": \"affected\", \"version\": \"3.9.1.28\"}, {\"status\": \"affected\", \"version\": \"3.9.1.38\"}, {\"status\": \"affected\", \"version\": \"3.8.1.53\"}, {\"status\": \"affected\", \"version\": \"3.9.1.52\"}, {\"status\": \"affected\", \"version\": \"3.10.1.1\"}, {\"status\": \"affected\", \"version\": \"3.9.1.64\"}, {\"status\": \"affected\", \"version\": \"3.10.2.11\"}, {\"status\": \"affected\", \"version\": \"3.9.1.66\"}, {\"status\": \"affected\", \"version\": \"3.10.3.19\"}, {\"status\": \"affected\", \"version\": \"3.9.1.69\"}, {\"status\": \"affected\", \"version\": \"3.10.4.8\"}, {\"status\": \"affected\", \"version\": \"3.10.5.6\"}, {\"status\": \"affected\", \"version\": \"4.0.1.1\"}, {\"status\": \"affected\", \"version\": \"4.0.2.4\"}, {\"status\": \"affected\", \"version\": \"4.0.2.5\"}, {\"status\": \"affected\", \"version\": \"3.10.6.3\"}, {\"status\": \"affected\", \"version\": \"3.10.7.4\"}, {\"status\": \"affected\", \"version\": \"4.0.3.13\"}, {\"status\": \"affected\", \"version\": \"4.0.3.17\"}, {\"status\": \"affected\", \"version\": \"3.10.8.3\"}], \"defaultStatus\": \"unknown\"}], \"exploits\": [{\"lang\": \"en\", \"value\": \"The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory.\"}], \"references\": [{\"url\": \"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-csw1-shSvndWP\", \"name\": \"cisco-sa-hardening-csw1-shSvndWP\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"As part of Cisco\u0027s ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.\\r\\n\\r\\nThe vulnerabilities tracked by CVE-2026-20317 are related to improper authentication issues that are grouped under the Common Weakness Enumeration (CWE) CWE-287.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"cwe\", \"cweId\": \"CWE-287\", \"description\": \"Improper Authentication\"}]}], \"providerMetadata\": {\"orgId\": \"d1c1063e-7a18-46af-9102-31f8928bc633\", \"shortName\": \"cisco\", \"dateUpdated\": \"2026-08-19T16:19:28.234Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2026-20317\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-08-20T15:57:08.173Z\", \"dateReserved\": \"2025-10-08T11:59:15.410Z\", \"assignerOrgId\": \"d1c1063e-7a18-46af-9102-31f8928bc633\", \"datePublished\": \"2026-08-19T16:19:28.234Z\", \"assignerShortName\": \"cisco\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

CERTFR-2026-AVI-1058

Vulnerability from certfr_avis - Published: 2026-08-20 - Updated: 2026-08-20

De multiples vulnérabilités ont été découvertes dans les produits Cisco. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et une atteinte à la confidentialité des données.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products

Vendor	Product	Description
Cisco	BroadWorks	BroadWorks Xtended Services Platform versions antérieures à RI.2026.07
Cisco	BroadWorks	BroadWorks Profile Server versions antérieures à RI.2026.07
Cisco	BroadWorks	BroadWorks Application Server versions antérieures à RI.2026.07
Cisco	Crosswork	Crosswork versions antérieures à 7.2.1-SP
Cisco	BroadWorks	BroadWorks Application Delivery Platform versions antérieures à RI.2026.07
Cisco	Secure Workload	Secure Workload versions antérieures à 3.10.9.1
Cisco	Secure Workload	Secure Workload versions 4.0.x antérieures à 4.0.4.16

References

Title

Publication Time

FKIE_CVE-2026-20317

Vulnerability from fkie_nvd - Published: 2026-08-19 17:18 - Updated: 2026-08-20 16:17

Severity

10.0 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H

Summary

References

	URL	Tags
	psirt@cisco.com	https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-csw1-shSvndWP
	af854a3a-2127-422b-91ae-364da2661108	https://www.cve.org/Media/News/item/blog/2026/06/16/Preserving-Vulnerability-Level-Identification

Impacted products

	Vendor	Product	Version

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "defaultStatus": "unknown",
          "product": "Cisco Secure Workload",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "2.2.1.41"
            },
            {
              "status": "affected",
              "version": "3.2.1.18"
            },
            {
              "status": "affected",
              "version": "3.3.2.50"
            },
            {
              "status": "affected",
              "version": "3.4.1.28"
            },
            {
              "status": "affected",
              "version": "3.4.1.34"
            },
            {
              "status": "affected",
              "version": "2.3.1.45"
            },
            {
              "status": "affected",
              "version": "2.3.1.41"
            },
            {
              "status": "affected",
              "version": "3.3.2.28"
            },
            {
              "status": "affected",
              "version": "3.1.1.59"
            },
            {
              "status": "affected",
              "version": "2.0.2.20"
            },
            {
              "status": "affected",
              "version": "2.1.1.33"
            },
            {
              "status": "affected",
              "version": "2.1.1.29"
            },
            {
              "status": "affected",
              "version": "3.2.1.28"
            },
            {
              "status": "affected",
              "version": "3.4.1.35"
            },
            {
              "status": "affected",
              "version": "3.1.1.65"
            },
            {
              "status": "affected",
              "version": "3.1.1.67"
            },
            {
              "status": "affected",
              "version": "2.0.1.34"
            },
            {
              "status": "affected",
              "version": "2.3.1.49"
            },
            {
              "status": "affected",
              "version": "2.2.1.39"
            },
            {
              "status": "affected",
              "version": "3.4.1.19"
            },
            {
              "status": "affected",
              "version": "3.3.2.23"
            },
            {
              "status": "affected",
              "version": "3.1.1.61"
            },
            {
              "status": "affected",
              "version": "3.1.1.54"
            },
            {
              "status": "affected",
              "version": "3.5.1.17"
            },
            {
              "status": "affected",
              "version": "3.3.2.33"
            },
            {
              "status": "affected",
              "version": "3.5.1.1"
            },
            {
              "status": "affected",
              "version": "2.3.1.53"
            },
            {
              "status": "affected",
              "version": "3.5.1.20"
            },
            {
              "status": "affected",
              "version": "3.5.1.30"
            },
            {
              "status": "affected",
              "version": "3.3.2.16"
            },
            {
              "status": "affected",
              "version": "3.1.1.55"
            },
            {
              "status": "affected",
              "version": "3.4.1.6"
            },
            {
              "status": "affected",
              "version": "2.3.1.50"
            },
            {
              "status": "affected",
              "version": "2.3.1.52"
            },
            {
              "status": "affected",
              "version": "3.2.1.19"
            },
            {
              "status": "affected",
              "version": "2.2.1.35"
            },
            {
              "status": "affected",
              "version": "3.1.1.53"
            },
            {
              "status": "affected",
              "version": "3.1.1.70"
            },
            {
              "status": "affected",
              "version": "3.2.1.20"
            },
            {
              "status": "affected",
              "version": "3.5.1.2"
            },
            {
              "status": "affected",
              "version": "1.103.1.12"
            },
            {
              "status": "affected",
              "version": "2.3.1.51"
            },
            {
              "status": "affected",
              "version": "3.3.2.42"
            },
            {
              "status": "affected",
              "version": "3.4.1.1"
            },
            {
              "status": "affected",
              "version": "3.3.2.12"
            },
            {
              "status": "affected",
              "version": "2.1.1.31"
            },
            {
              "status": "affected",
              "version": "3.5.1.23"
            },
            {
              "status": "affected",
              "version": "3.3.2.53"
            },
            {
              "status": "affected",
              "version": "3.4.1.14"
            },
            {
              "status": "affected",
              "version": "3.3.2.2"
            },
            {
              "status": "affected",
              "version": "3.4.1.20"
            },
            {
              "status": "affected",
              "version": "3.3.2.35"
            },
            {
              "status": "affected",
              "version": "2.2.1.34"
            },
            {
              "status": "affected",
              "version": "1.102.21"
            },
            {
              "status": "affected",
              "version": "3.3.2.5"
            },
            {
              "status": "affected",
              "version": "3.5.1.31"
            },
            {
              "status": "affected",
              "version": "3.6.1.5"
            },
            {
              "status": "affected",
              "version": "3.2.1.31"
            },
            {
              "status": "affected",
              "version": "3.5.1.37"
            },
            {
              "status": "affected",
              "version": "3.4.1.40"
            },
            {
              "status": "affected",
              "version": "3.6.1.17"
            },
            {
              "status": "affected",
              "version": "3.6.1.21"
            },
            {
              "status": "affected",
              "version": "3.2.1.32"
            },
            {
              "status": "affected",
              "version": "3.2.1.33"
            },
            {
              "status": "affected",
              "version": "3.6.1.35"
            },
            {
              "status": "affected",
              "version": "3.6.1.36"
            },
            {
              "status": "affected",
              "version": "3.7.1.5"
            },
            {
              "status": "affected",
              "version": "3.6.1.47"
            },
            {
              "status": "affected",
              "version": "3.7.1.22"
            },
            {
              "status": "affected",
              "version": "3.6.1.52"
            },
            {
              "status": "affected",
              "version": "3.7.1.39"
            },
            {
              "status": "affected",
              "version": "3.8.1.1"
            },
            {
              "status": "affected",
              "version": "3.7.1.51"
            },
            {
              "status": "affected",
              "version": "3.8.1.19"
            },
            {
              "status": "affected",
              "version": "3.8.1.36"
            },
            {
              "status": "affected",
              "version": "3.7.1.59"
            },
            {
              "status": "affected",
              "version": "3.8.1.39"
            },
            {
              "status": "affected",
              "version": "3.9.1.1"
            },
            {
              "status": "affected",
              "version": "3.9.1.10"
            },
            {
              "status": "affected",
              "version": "3.9.1.24"
            },
            {
              "status": "affected",
              "version": "3.9.1.25"
            },
            {
              "status": "affected",
              "version": "3.9.1.28"
            },
            {
              "status": "affected",
              "version": "3.9.1.38"
            },
            {
              "status": "affected",
              "version": "3.8.1.53"
            },
            {
              "status": "affected",
              "version": "3.9.1.52"
            },
            {
              "status": "affected",
              "version": "3.10.1.1"
            },
            {
              "status": "affected",
              "version": "3.9.1.64"
            },
            {
              "status": "affected",
              "version": "3.10.2.11"
            },
            {
              "status": "affected",
              "version": "3.9.1.66"
            },
            {
              "status": "affected",
              "version": "3.10.3.19"
            },
            {
              "status": "affected",
              "version": "3.9.1.69"
            },
            {
              "status": "affected",
              "version": "3.10.4.8"
            },
            {
              "status": "affected",
              "version": "3.10.5.6"
            },
            {
              "status": "affected",
              "version": "4.0.1.1"
            },
            {
              "status": "affected",
              "version": "4.0.2.4"
            },
            {
              "status": "affected",
              "version": "4.0.2.5"
            },
            {
              "status": "affected",
              "version": "3.10.6.3"
            },
            {
              "status": "affected",
              "version": "3.10.7.4"
            },
            {
              "status": "affected",
              "version": "4.0.3.13"
            },
            {
              "status": "affected",
              "version": "4.0.3.17"
            },
            {
              "status": "affected",
              "version": "3.10.8.3"
            }
          ]
        }
      ],
      "source": "psirt@cisco.com"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "As part of Cisco\u0027s ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.\r\n\r\nThe vulnerabilities tracked by CVE-2026-20317 are related to improper authentication issues that are grouped under the Common Weakness Enumeration (CWE) CWE-287."
    }
  ],
  "id": "CVE-2026-20317",
  "lastModified": "2026-08-20T16:17:21.277",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 10.0,
          "baseSeverity": "CRITICAL",
          "confidentialityImpact": "NONE",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "CHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 5.8,
        "source": "psirt@cisco.com",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-20317",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2026-08-20T15:40:41.775734Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2026-08-19T17:18:39.963",
  "references": [
    {
      "source": "psirt@cisco.com",
      "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-csw1-shSvndWP"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://www.cve.org/Media/News/item/blog/2026/06/16/Preserving-Vulnerability-Level-Identification"
    }
  ],
  "sourceIdentifier": "psirt@cisco.com",
  "vulnStatus": "Awaiting Analysis",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-287"
        }
      ],
      "source": "psirt@cisco.com",
      "type": "Secondary"
    }
  ]
}

GHSA-VPW3-87C9-76XJ

Vulnerability from github – Published: 2026-08-19 18:32 – Updated: 2026-08-19 21:30

Details

The vulnerabilities tracked by CVE-2026-20317 are related to improper authentication issues that are grouped under the Common Weakness Enumeration (CWE) CWE-287.

Severity

10.0 (Critical)


                  
                    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2026-20317"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-287"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2026-08-19T17:18:39Z",
    "severity": "CRITICAL"
  },
  "details": "As part of Cisco\u0027s ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.\n\nThe vulnerabilities tracked by CVE-2026-20317 are related to improper authentication issues that are grouped under the Common Weakness Enumeration (CWE) CWE-287.",
  "id": "GHSA-vpw3-87c9-76xj",
  "modified": "2026-08-19T21:30:28Z",
  "published": "2026-08-19T18:32:49Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-20317"
    },
    {
      "type": "WEB",
      "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-csw1-shSvndWP"
    },
    {
      "type": "WEB",
      "url": "https://www.cve.org/Media/News/item/blog/2026/06/16/Preserving-Vulnerability-Level-Identification"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H",
      "type": "CVSS_V3"
    }
  ]
}

NCSC-2026-0323

Vulnerability from csaf_ncscnl - Published: 2026-08-21 08:23 - Updated: 2026-08-21 08:23

Summary

Kwetsbaarheden verholpen in Cisco Secure Workload

Notes

The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions: NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein. NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory. This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings.

Feiten: Cisco heeft meerdere kwetsbaarheden verholpen in Cisco Secure Workload.

Interpretaties: De kwetsbaarheden betreffen onder andere improper neutralization of special elements (CWE-74), improper access control (CWE-284), improper authentication (CWE-287), improper input validation (CWE-20) en buffer management problemen (CWE-119). Deze kwetsbaarheden zijn intern ontdekt tijdens een uitgebreide security review door het engineering team van Cisco Secure Workload. Een aanvaller kan mogelijk misbruik maken van deze kwetsbaarheden afhankelijk van de specifieke aard van de fout, zoals het omzeilen van toegangscontroles, authenticatiefouten, of het veroorzaken van onjuiste verwerking van invoer. De kwetsbaarheden zijn opgelost door middel van software hardening updates.

Oplossingen: Cisco heeft software hardening updates uitgebracht om de kwetsbaarheden in Cisco Secure Workload te verhelpen. Zie bijgevoegde referenties voor meer informatie.

Kans: medium

Schade: high

CWE-20: Improper Input Validation

CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE-284: Improper Access Control

CWE-287: Improper Authentication

CVE-2026-20231

Cisco Secure Workload engineering team conducted an internal security review resulting in software hardening releases that fix multiple vulnerabilities, including improper neutralization of special elements (CWE-74) tracked by CVE-2026-20231.

9.9 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
vers:unknown/* Cisco / Secure Workload		vers:unknown/*

CVE-2026-20315

Cisco Secure Workload engineering team conducted an internal security review resulting in software hardening releases that fix multiple vulnerabilities related to improper access control (CVE-2026-20315, CWE-284).

10.0 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
vers:unknown/* Cisco / Secure Workload		vers:unknown/*

CVE-2026-20317

10.0 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
vers:unknown/* Cisco / Secure Workload		vers:unknown/*

CVE-2026-20318

9.6 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
vers:unknown/* Cisco / Secure Workload		vers:unknown/*

CVE-2026-20319

Cisco Secure Workload engineering team conducted an internal security review resulting in software hardening releases that address multiple buffer management vulnerabilities, including those tracked under CVE-2026-20319 and CWE-119.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
vers:unknown/* Cisco / Secure Workload		vers:unknown/*

References

6 references

URL	Category
https://sec.cloudapps.cisco.com/security/center/c…	external
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self
https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-…	self

JSON

To clipboard

{
  "document": {
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE"
      }
    },
    "lang": "nl",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n    NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n    NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n    This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
      },
      {
        "category": "description",
        "text": "Cisco heeft meerdere kwetsbaarheden verholpen in Cisco Secure Workload.",
        "title": "Feiten"
      },
      {
        "category": "description",
        "text": "De kwetsbaarheden betreffen onder andere improper neutralization of special elements (CWE-74), improper access control (CWE-284), improper authentication (CWE-287), improper input validation (CWE-20) en buffer management problemen (CWE-119). Deze kwetsbaarheden zijn intern ontdekt tijdens een uitgebreide security review door het engineering team van Cisco Secure Workload. Een aanvaller kan mogelijk misbruik maken van deze kwetsbaarheden afhankelijk van de specifieke aard van de fout, zoals het omzeilen van toegangscontroles, authenticatiefouten, of het veroorzaken van onjuiste verwerking van invoer. De kwetsbaarheden zijn opgelost door middel van software hardening updates.",
        "title": "Interpretaties"
      },
      {
        "category": "description",
        "text": "Cisco heeft software hardening updates uitgebracht om de kwetsbaarheden in Cisco Secure Workload te verhelpen. Zie bijgevoegde referenties voor meer informatie.",
        "title": "Oplossingen"
      },
      {
        "category": "general",
        "text": "medium",
        "title": "Kans"
      },
      {
        "category": "general",
        "text": "high",
        "title": "Schade"
      },
      {
        "category": "general",
        "text": "Improper Input Validation",
        "title": "CWE-20"
      },
      {
        "category": "general",
        "text": "Improper Neutralization of Special Elements in Output Used by a Downstream Component (\u0027Injection\u0027)",
        "title": "CWE-74"
      },
      {
        "category": "general",
        "text": "Improper Restriction of Operations within the Bounds of a Memory Buffer",
        "title": "CWE-119"
      },
      {
        "category": "general",
        "text": "Improper Access Control",
        "title": "CWE-284"
      },
      {
        "category": "general",
        "text": "Improper Authentication",
        "title": "CWE-287"
      }
    ],
    "publisher": {
      "category": "coordinator",
      "contact_details": "cert@ncsc.nl",
      "name": "Nationaal Cyber Security Centrum",
      "namespace": "https://www.ncsc.nl/"
    },
    "references": [
      {
        "category": "external",
        "summary": "Reference",
        "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-csw1-shSvndWP"
      }
    ],
    "title": "Kwetsbaarheden verholpen in Cisco Secure Workload",
    "tracking": {
      "current_release_date": "2026-08-21T08:23:29.037041Z",
      "generator": {
        "date": "2025-08-04T16:30:00Z",
        "engine": {
          "name": "V.A.",
          "version": "1.3"
        }
      },
      "id": "NCSC-2026-0323",
      "initial_release_date": "2026-08-21T08:23:29.037041Z",
      "revision_history": [
        {
          "date": "2026-08-21T08:23:29.037041Z",
          "number": "1.0.0",
          "summary": "Initiele versie"
        }
      ],
      "status": "final",
      "version": "1.0.0"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-1"
                }
              }
            ],
            "category": "product_name",
            "name": "Secure Workload"
          }
        ],
        "category": "vendor",
        "name": "Cisco"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-20231",
      "notes": [
        {
          "category": "description",
          "text": "Cisco Secure Workload engineering team conducted an internal security review resulting in software hardening releases that fix multiple vulnerabilities, including improper neutralization of special elements (CWE-74) tracked by CVE-2026-20231.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-20231 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20231.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.9,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1"
          ]
        }
      ],
      "title": "CVE-2026-20231"
    },
    {
      "cve": "CVE-2026-20315",
      "notes": [
        {
          "category": "description",
          "text": "Cisco Secure Workload engineering team conducted an internal security review resulting in software hardening releases that fix multiple vulnerabilities related to improper access control (CVE-2026-20315, CWE-284).",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-20315 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20315.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 10.0,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1"
          ]
        }
      ],
      "title": "CVE-2026-20315"
    },
    {
      "cve": "CVE-2026-20317",
      "notes": [
        {
          "category": "description",
          "text": "Cisco Secure Workload engineering team conducted an internal security review resulting in software hardening releases that fix multiple vulnerabilities, including improper authentication issues (CVE-2026-20317, CWE-287).",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-20317 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20317.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 10.0,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1"
          ]
        }
      ],
      "title": "CVE-2026-20317"
    },
    {
      "cve": "CVE-2026-20318",
      "notes": [
        {
          "category": "description",
          "text": "Cisco Secure Workload engineering team conducted an internal security review resulting in software hardening releases that fix multiple vulnerabilities related to improper input validation (CVE-2026-20318, CWE-20).",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-20318 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20318.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.6,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1"
          ]
        }
      ],
      "title": "CVE-2026-20318"
    },
    {
      "cve": "CVE-2026-20319",
      "notes": [
        {
          "category": "description",
          "text": "Cisco Secure Workload engineering team conducted an internal security review resulting in software hardening releases that address multiple buffer management vulnerabilities, including those tracked under CVE-2026-20319 and CWE-119.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-20319 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20319.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1"
          ]
        }
      ],
      "title": "CVE-2026-20319"
    }
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.

Action not permitted

CVE-2026-20317 (GCVE-0-2026-20317)

CERTFR-2026-AVI-1058

Solutions

FKIE_CVE-2026-20317

GHSA-VPW3-87C9-76XJ

NCSC-2026-0323

Tags

Sightings

Nomenclature