Cisco released patches for 15 vulnerabilities across Crosswork, Secure Workload, BroadWorks, and other products, including several critical flaws that could enable remote code execution, authentication bypass, and sensitive file access. Cisco said it is not aware of any of the issues being exploited in the wild, and fixes are now available...

Cisco has released fixes for CVE-2026-20223, a maximum-severity flaw in Secure Workload that could let an unauthenticated remote attacker access sensitive data and alter configurations across tenant boundaries. The disclosure follows Cisco’s report of another critical authentication bypass in Catalyst SD-WAN Controller, which was exploited by UAT-8616. #CiscoSecureWorkload #CVE-2026-20223 #CatalystSDWANController #CVE-2026-20182...

Cisco released fixes for a critical flaw in Secure Workload, tracked as CVE-2026-20223, that could let attackers gain Site Admin privileges and access or alter tenant resources through crafted REST API requests. The company also patched three medium-severity bugs in ThousandEyes and Nexus switches that could enable remote command execution or...

Cisco has released fixes for CVE-2026-20223, a maximum-severity Secure Workload flaw that could let unauthenticated attackers obtain Site Admin privileges through crafted REST API requests. The issue can expose sensitive data and allow configuration changes across tenant boundaries, while Cisco says no workarounds exist and there is no evidence of in-the-wild exploitation so far. #CiscoSecureWorkload #CVE-2026-20223 #Cisco #PSIRT