CVE-2026-20231: falha crítica em Cisco Secure Workload
Cisco Secure Workload Software Security Hardening Release August 2026 - Improper Neutralization of Special Elements Vulnerabilities
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
28Vexday Risk Score
Sem sinal de exploração. Ela tem alerta oficial do governo brasileiro.
ssvc Trackcvss 9.9epss 0.5%
Alerta oficial no Brasil
O governo federal publicou alerta, recomendação ou boletim que cita esta vulnerabilidade.
- CISC Gov.br · 25 ago 2026Boletim do CISC de Vulnerabilidadesler no gov.br ↗
Fonte: CTIR Gov (GSI) e CISC Gov.br, sob licença CC BY-ND 3.0.
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.
The vulnerabilities tracked by CVE-2026-20231 are related to improper neutralization of special elements issues that are grouped under the Common Weakness Enumeration (CWE) CWE-74.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Produtos afetados
Cisco · Cisco Secure WorkloadCVEs relacionadas — Cisco Secure Workload
No mesmo produto, das mais perigosas para as menos.
CVE-2022-20652MEDIUMCisco Tetration Command Injection VulnerabilityEPSS 1.3%CVE-2026-20223CRITICALCisco Secure Workload Unauthorized API Access VulnerabilityEPSS 0.8%CVE-2021-34789MEDIUMCisco Tetration Stored Cross-Site Scripting VulnerabilityEPSS 0.6%CVE-2026-20317CRITICALCisco Secure Workload Software Security Hardening Release August 2026 - Improper Authentication VulnerabilitiesEPSS 0.6%CVE-2023-20136MEDIUMCVE-2023-20136EPSS 0.5%CVE-2026-20315CRITICALCisco Secure Workload Software Security Hardening Release August 2026 - Improper Access Control VulnerabilitiesEPSS 0.5%