Find notable cyber news and cases, enriched with sources, timelines, and signals.
Home Watchlists Beta Browse News Feed Stats About Contact

Cisco Secure Workload REST API patch release (CVE-2026-20223)

Security Patch Release
First reported
Last updated
Happening score
H score 55
1 unique sources, 1 articles

Summary

Hide ▲

Cisco patched CVE-2026-20223, a CVSS 10.0 Secure Workload REST API flaw that could expose sensitive data and allow configuration changes across tenant boundaries. The update covers Cisco Secure Workload Cluster Software on SaaS and on-prem deployments. Customers on Release 3.10 and Release 4.0 must move to 3.10.8.3 or 4.0.3.17, while 3.9 and earlier require migration to a fixed release because no workaround exists.

Related Happenings

SonicWall security patch release for CVE-2026-15409

Security Patch Release
H score54 First: 15.07.2026 00:23 Last: 15.07.2026 00:23 Sources 1

About this happening: SonicWall released hotfix security updates for SMA1000 appliances after confirming active exploitation of CVE-2026-15409 and CVE-2026-15410. The fixes are availabl...

Open Happening

RabbitMQ maintainers security patch release for CVE-2026-57219

Security Patch Release
H score29 First: 14.07.2026 16:48 Last: 14.07.2026 16:48 Sources 1

About this happening: RabbitMQ maintainers released fixed versions for multiple supported release lines, closing two access-control flaws that could expose OAuth client secrets and cross-te...

Open Happening

Cisco security patch release for CVE-2026-20245

Security Patch Release
H score38 First: 25.06.2026 00:29 Last: 25.06.2026 00:29 Sources 1

About this happening: Cisco released security updates for Cisco Catalyst SD-WAN after CVE-2026-20245 was linked to root-level command execution, and customers were told to move to fixed sof...

Open Happening

Squid web proxy patch for CVE-2026-47729

Security Patch Release
H score20 First: 22.06.2026 17:29 Last: 22.06.2026 17:29 Sources 1

About this happening: Squid maintainers merged a null-terminator check for CVE-2026-47729 into the development branch and v7, closing the FTP-parser over-read that could expose shar...

Open Happening

SimpleHelp security update for CVE-2026-48558

Security Patch Release
H score65 First: 15.06.2026 23:06 Last: 15.06.2026 23:06 Sources 1

About this happening: SimpleHelp released 5.5.16 and 6.0 RC2 on June 9 to fix CVE-2026-48558, a critical OIDC authentication flaw in SimpleHelp remote management software th...

Open Happening

Timeline

  1. 22.05.2026 08:36 2 articles · 1mo ago

    Cisco releases Secure Workload fixes for CVE-2026-20223

    Mitigation Patch Update

    Cisco rolled out updates for CVE-2026-20223, a CVSS score: 10.0 REST API vulnerability in Cisco Secure Workload Cluster Software on SaaS and on-prem deployments that could let an unauthenticated, remote attacker send a crafted API request, read sensitive information, and make configuration changes across tenant boundaries with the privileges of the Site Admin user. Cisco said Cisco Secure Workload Release 3.10 is fixed in 3.10.8.3, Cisco Secure Workload Release 4.0 is fixed in 4.0.3.17, and Cisco Secure Workload Release 3.9 and earlier must migrate to a fixed release because no workaround exists.

    Show sources
    Open in new tab
  2. 22.05.2026 08:36 1 articles · 1mo ago

    Cisco discloses CVE-2026-20223 details

    Initial Disclosure

    Cisco disclosed CVE-2026-20223, a maximum-severity flaw in Secure Workload that arises from insufficient validation and authentication when accessing REST API endpoints. Cisco said the vulnerability could be exploited by sending a crafted API request to an affected endpoint, that it found the issue during internal security testing, and that there is no evidence of it being exploited in the wild.

    Show sources
    Open in new tab