CyberHappenings logo
☰
Home Browse Watchlists Experimental About

Track cybersecurity events as they unfold. Sourced timelines. Filter, sort, and browse. Fast, privacy‑respecting. No invasive ads, no tracking.

Critical REST API Vulnerability in Cisco Secure Workload Allows Unauthenticated Data Access and Privilege Escalation

First reported
Last updated
1 unique sources, 1 articles

Summary

Hide ▲

A critical, unauthenticated REST API vulnerability (CVE-2026-20223, CVSS 10.0) in Cisco Secure Workload enables remote attackers to read sensitive data and modify configurations across tenant boundaries with Site Admin privileges. The flaw affects both SaaS and on-prem deployments across multiple software releases, with no available workarounds. Exploitation requires crafting a malicious API request to a vulnerable endpoint, posing significant risk to network isolation and data confidentiality.

Timeline

  1. 22.05.2026 08:36 1 articles · 12h ago

    Cisco Secure Workload Critical REST API Flaw Patched (CVE-2026-20223)

    Cisco released patches for a critical, unauthenticated REST API vulnerability (CVE-2026-20223, CVSS 10.0) in Secure Workload affecting SaaS and on-prem deployments. The flaw allows remote attackers to read sensitive data and make configuration changes with Site Admin privileges across tenant boundaries. Fixed versions include 3.10.8.3, 4.0.3.17, and migration to 3.9+ releases. Cisco found the issue during internal testing and reports no evidence of exploitation in the wild.

    Show sources
    Open in new tab

Information Snippets