CVE-2026-20315criticalCWE-284

CVE-2026-20315: fallo crítico en Cisco Secure Workload

Cisco Secure Workload Software Security Hardening Release August 2026 - Improper Access Control Vulnerabilities

Publicada el · Actualizada el

28Vexday Risk Score

Sin señal de explotación. Ella tiene alerta oficial del gobierno de Brasil.

ssvc Trackcvss 10epss 0.5%
probabilidad de explotación
0.5%top 58% de las CVE
explotación observada
noninguna fuente lo reporta
Alerta oficial en Brasil

El gobierno federal de Brasil publicó una alerta, recomendación o boletín que cita esta vulnerabilidad.

  • CTIR Gov · ALERTA 75/2026 · 26 ago 2026Vulnerabilidade crítica que afeta os produtos da Cisco e da Citrixleer en gov.br ↗
  • CISC Gov.br · 25 ago 2026Boletim do CISC de Vulnerabilidadesleer en gov.br ↗
Fuente: CTIR Gov (GSI) y CISC Gov.br, bajo licencia CC BY-ND 3.0.
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20315 are related to improper access control issues that are grouped under the Common Weakness Enumeration (CWE) CWE-284.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Productos afectados
Cisco · Cisco Secure Workload
CVEs relacionadas — Cisco Secure Workload

En el mismo producto, de las más peligrosas a las menos.

CVE-2022-20652MEDIUMCisco Tetration Command Injection VulnerabilityEPSS 1.3%CVE-2026-20223CRITICALCisco Secure Workload Unauthorized API Access VulnerabilityEPSS 0.8%CVE-2021-34789MEDIUMCisco Tetration Stored Cross-Site Scripting VulnerabilityEPSS 0.6%CVE-2026-20317CRITICALCisco Secure Workload Software Security Hardening Release August 2026 - Improper Authentication VulnerabilitiesEPSS 0.6%CVE-2026-20231CRITICALCisco Secure Workload Software Security Hardening Release August 2026 - Improper Neutralization of Special Elements VulnerabilitiesEPSS 0.5%CVE-2023-20136MEDIUMCVE-2023-20136EPSS 0.5%
Referencias
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-csw1-shSvndWPhttps://www.cve.org/Media/News/item/blog/2026/06/16/Preserving-Vulnerability-Level-Identification