Cisco Patches CVSS 10.0 Secure Workload REST API Flaw Enabling Data Access

Cisco patched a critical Secure Workload vulnerability (CVE-2026-20223, CVSS 10.0) from insufficient REST API validation enabling unauthenticated remote data access.

• •Attackers can read sensitive data and modify configurations with Site Admin privileges across tenants
• •Affects Cisco Secure Workload on SaaS and on-premises deployments
• •Fixed in versions 3.10.8.3 and 4.0.3.17; earlier versions require migration
• •No workarounds; discovered internally with no evidence of exploitation

This summary was automatically generated by AI based on the original article and may not be fully accurate.