CVE-2026-20223

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-20223
A vulnerability in the access validation of internal REST APIs of Cisco Secure Workload could allow an unauthenticated, remote attacker to access site resources with the privileges of the Site Admin role. This vulnerability is due to insufficient validation and authentication when accessing REST API endpoints. An attacker could exploit this vulnerability if they are able to send a crafted API request to an affected endpoint. A successful exploit could allow the attacker to read sensitive information and make configuration changes across tenant boundaries with the privileges of the Site Admin user. 

10.0 /10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 6.0

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

References
Link Resource
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-csw-pnbsa-g8WEnuy Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:cisco:secure_workload:*:*:*:*:*:*:*:*
cpe:2.3:a:cisco:secure_workload:*:*:*:*:*:*:*:*
History

23 Jul 2026, 12:10

Type Values Removed Values Added
Summary
  • (es) Una vulnerabilidad en la validación de acceso de las API REST internas de Cisco Secure Workload podría permitir a un atacante remoto no autenticado acceder a los recursos del sitio con los privilegios del rol de Administrador del Sitio. Esta vulnerabilidad se debe a una validación y autenticación insuficientes al acceder a los puntos finales de la API REST. Un atacante podría explotar esta vulnerabilidad si es capaz de enviar una solicitud de API manipulada a un punto final afectado. Un exploit exitoso podría permitir al atacante leer información sensible y realizar cambios de configuración a través de los límites de los inquilinos con los privilegios del usuario Administrador del Sitio.

30 Jun 2026, 16:30

Type Values Removed Values Added
References () https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-csw-pnbsa-g8WEnuy - () https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-csw-pnbsa-g8WEnuy - Vendor Advisory
First Time Cisco secure Workload
Cisco
CPE cpe:2.3:a:cisco:secure_workload:*:*:*:*:*:*:*:*

20 May 2026, 17:16

Type Values Removed Values Added
New CVE
Information

Published : 2026-05-20 17:16

Updated : 2026-07-23 12:10

NVD link : CVE-2026-20223

Mitre link : CVE-2026-20223

CVE.ORG link : CVE-2026-20223

JSON object : View

Products Affected

cisco

  • secure_workload
CWE
CWE-306

Missing Authentication for Critical Function