CVE-2026-20315Improper Access Control in Cisco Secure Workload
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20315 are related to improper access control issues that are grouped under the Common Weakness Enumeration (CWE) CWE-284.
View on NVDAnalysis
Cisco Secure Workload contains multiple improper access control vulnerabilities that can lead to a complete security bypass. With a CVSS score of 10.0, these flaws could allow unauthorized users to circumvent policies in cloud and data center environments. Teams using this platform for micro-segmentation should apply the hardening release immediately.
Relevant roles
Severity
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:HCWE-284EPSS
No EPSS score yet (CVE may be too fresh).
Technical description
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20315 are related to improper access control issues that are grouped under the Common Weakness Enumeration (CWE) CWE-284.