CVE-2026-20315: falha crítica em Cisco Secure Workload
Cisco Secure Workload Software Security Hardening Release August 2026 - Improper Access Control Vulnerabilities
Publicada em · Atualizada em
28Vexday Risk Score
Sem sinal de exploração. Ela tem alerta oficial do governo brasileiro.
ssvc Trackcvss 10epss 0.5%
probabilidade de exploração
0.5%top 58% das CVEs
exploração observada
nãonenhuma fonte reporta
Alerta oficial no Brasil
O governo federal publicou alerta, recomendação ou boletim que cita esta vulnerabilidade.
- CTIR Gov · ALERTA 75/2026 · 26 ago 2026Vulnerabilidade crítica que afeta os produtos da Cisco e da Citrixler no gov.br ↗
- CISC Gov.br · 25 ago 2026Boletim do CISC de Vulnerabilidadesler no gov.br ↗
Fonte: CTIR Gov (GSI) e CISC Gov.br, sob licença CC BY-ND 3.0.
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.
The vulnerabilities tracked by CVE-2026-20315 are related to improper access control issues that are grouped under the Common Weakness Enumeration (CWE) CWE-284.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Produtos afetados
Cisco · Cisco Secure WorkloadCVEs relacionadas — Cisco Secure Workload
No mesmo produto, das mais perigosas para as menos.
CVE-2022-20652MEDIUMCisco Tetration Command Injection VulnerabilityEPSS 1.3%CVE-2026-20223CRITICALCisco Secure Workload Unauthorized API Access VulnerabilityEPSS 0.8%CVE-2021-34789MEDIUMCisco Tetration Stored Cross-Site Scripting VulnerabilityEPSS 0.6%CVE-2026-20317CRITICALCisco Secure Workload Software Security Hardening Release August 2026 - Improper Authentication VulnerabilitiesEPSS 0.6%CVE-2026-20231CRITICALCisco Secure Workload Software Security Hardening Release August 2026 - Improper Neutralization of Special Elements VulnerabilitiesEPSS 0.5%CVE-2023-20136MEDIUMCVE-2023-20136EPSS 0.5%