Source: Ministry of education information & communication security contingency platform
"" "" ""
| Publication Number | TACERT-ANA-2026052201051616 | Publication Time | 2026-05-22 13:37:17 |
| Incident Type | ANA-Vulnerability Alert | Discovery Time | 2026-05-22 13:37:17 |
| Impact Level | Low | ||
| [Subject] 【Vulnerability Alert】Cisco Secure Workload Has a Critical Information Security Vulnerability (CVE-2026-20223) |
|||
| [Content]
Forwarded from TWCERTCC Security Advisory TWCERTCC-200-202605-00000013 Cisco Secure Workload has an unauthorized API access vulnerability (CVE-2026-20223, CVSS: 10.0), which may allow unauthenticated remote attackers to access website resources with Site Admin privileges. Information Sharing Level: WHITE (the intelligence content is information that may be publicly disclosed) |
|||
| [Affected Platform]
Cisco Secure Workload versions 3.9 and earlier Cisco Secure Workload versions earlier than 3.10.8.3, not inclusive Cisco Secure Workload versions earlier than 4.0.3.17, not inclusiv |
|||
| [Recommended Actions]
Please update to Cisco Secure Workload version 3.10.8.3 or later, inclusive, or Cisco Secure Workload version 4.0.3.17 or later, inclusive. |
|||
|
[Reference] |
|||