Skip to content
Threat Feed

Product

Secure Workload

2 briefs RSS
critical advisory

Cisco Secure Workload Unauthorized API Access Vulnerability

Cisco Secure Workload versions 3.9 and prior, versions prior to 3.10.8.3, and versions prior to 4.0.3.17 are vulnerable to unauthorized API access, requiring an urgent update.

Secure Workload cisco vulnerability api
1r
critical advisory

Cisco Secure Workload Unauthorized API Access Vulnerability

CVE-2026-20223: An unauthenticated, remote attacker can access Cisco Secure Workload site resources with Site Admin privileges by sending a crafted API request, due to insufficient validation and authentication of REST API endpoints.

Secure Workload cve cve-2026-20223 privilege-escalation api-attack
2r 1t