CVE-2026-20231criticalCWE-74

CVE-2026-20231: critical vulnerability in Cisco Secure Workload

Cisco Secure Workload Software Security Hardening Release August 2026 - Improper Neutralization of Special Elements Vulnerabilities

Published · Updated

Follow this CVE+ Monitor Cisco Secure Workload

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. It has an official Brazilian government alert.

ssvc Trackcvss 9.9epss 0.5%
Official alert in Brazil

Brazil's federal government published an alert, recommendation or bulletin that cites this vulnerability.

Source: CTIR Gov (GSI) and CISC Gov.br, under the CC BY-ND 3.0 license.
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.   The vulnerabilities tracked by CVE-2026-20231 are related to improper neutralization of special elements issues that are grouped under the Common Weakness Enumeration (CWE) CWE-74.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Affected products
Cisco · Cisco Secure Workload
Related CVEs — Cisco Secure Workload

In the same product, most dangerous first.

CVE-2022-20652MEDIUMCisco Tetration Command Injection VulnerabilityEPSS 1.3%CVE-2026-20223CRITICALCisco Secure Workload Unauthorized API Access VulnerabilityEPSS 0.8%CVE-2021-34789MEDIUMCisco Tetration Stored Cross-Site Scripting VulnerabilityEPSS 0.6%CVE-2026-20317CRITICALCisco Secure Workload Software Security Hardening Release August 2026 - Improper Authentication VulnerabilitiesEPSS 0.6%CVE-2023-20136MEDIUMCVE-2023-20136EPSS 0.5%CVE-2026-20315CRITICALCisco Secure Workload Software Security Hardening Release August 2026 - Improper Access Control VulnerabilitiesEPSS 0.5%