CVE-2026-20315 & CVE-2026-20317: Cisco Secure Workload Auth Bypass, Privilege Escalation Hit CVSS 10

TL;DR

Cisco released hardening updates for Secure Workload on August 19, 2026. The Cisco Secure Workload authentication bypass and privilege escalation flaws include two vulnerabilities rated CVSS 10. Cisco found the bugs internally and reports no exploitation in the wild.

Why It Matters

Secure Workload protects data center and cloud workloads through microsegmentation. A break in its access controls therefore weakens the very tool meant to contain attackers. Two flaws here reach the maximum CVSS score of 10.

CVE-2026-20315 covers improper access control, including authorization and privilege issues. CVE-2026-20317 covers improper authentication, which enables an authentication bypass. Together, these Cisco Secure Workload authentication bypass and privilege escalation weaknesses could hand an attacker full control.

How the Attack Works

Cisco grouped the issues by weakness class rather than by single bug. As a result, each CVE represents the worst case within its category.

CVE-2026-20315 maps to CWE-284, improper access control. CVE-2026-20317 maps to CWE-287, improper authentication. A third flaw, CVE-2026-20231, scores 9.9 and covers command and OS injection. The advisory lists mechanism only and shares no exploit details.

Affected Versions

The flaws affect both SaaS and on-premises Cisco Secure Workload deployments. Cisco states the software is vulnerable regardless of device configuration. Cisco does not publish install counts, so exposure estimates remain unavailable from the vendor.

Patch and Mitigation Steps

Cisco confirms no workarounds exist, so patching is the only fix. Release 3.10 and earlier should move to 3.10.9.1. Release 4.0 should move to 4.0.4.16.

For SaaS, Cisco already upgraded the cluster software. Customers still need to update the Agent and Connector components themselves. Review the official Cisco Secure Workload security advisory and schedule upgrades quickly.

Support Our Threat Intelligence

If you find our CVE report and cybersecurity news helpful, consider supporting our work.

Buy Me a Coffee PayPal

Crypto

USDT (TRC20):

TN8BdV8cp4T1Cd28gK9qTAnZknzzuwyUtm Copy

USDT (ERC20):

0x3725e1a7d3bc5765499fa6aaafe307fabcd75bce Copy

Written by

@DdoS · Security Researcher

Do Son

Do Son is the Founder and Editor of SecurityOnline.info. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.