Riskcovery

CVE-2026-20223

Cisco Secure Workload Unauthorized API Access Vulnerability

State
Published
Severity
10.0 Critical
Published
May 20, 2026
Updated
May 21, 2026
Reserved
Oct 8, 2025

Read the record on cve.org

Description

A vulnerability in the access validation of internal REST APIs of Cisco Secure Workload could allow an unauthenticated, remote attacker to access site resources with the privileges of the Site Admin role.

This vulnerability is due to insufficient validation and authentication when accessing REST API endpoints. An attacker could exploit this vulnerability if they are able to send a crafted API request to an affected endpoint. A successful exploit could allow the attacker to read sensitive information and make configuration changes across tenant boundaries with the privileges of the Site Admin user. 

Scores

CVSSScoreVectorSource
3.110.0 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:Hcisco

Weaknesses

  • CWE-306 Missing Authentication for Critical Function

Affected Products

ProductVersions
Cisco Secure WorkloadCisco
  • 2.2.1.41Affected
  • 3.2.1.18Affected
  • 3.3.2.50Affected
  • 3.4.1.28Affected
  • 3.4.1.34Affected
  • 2.3.1.45Affected
  • 2.3.1.41Affected
  • 3.3.2.28Affected
  • 3.1.1.59Affected
  • 2.0.2.20Affected
  • 2.1.1.33Affected
  • 2.1.1.29Affected
  • 3.2.1.28Affected
  • 3.4.1.35Affected
  • 3.1.1.65Affected
  • 3.1.1.67Affected
  • 2.0.1.34Affected
  • 2.3.1.49Affected
  • 2.2.1.39Affected
  • 3.4.1.19Affected
  • 3.3.2.23Affected
  • 3.1.1.61Affected
  • 3.1.1.54Affected
  • 3.5.1.17Affected
  • 3.3.2.33Affected
  • and 74 more versions

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.