Cisco Secure Workload Unauthorized API Access Vulnerability_CVE-2026-20223

10 / 10

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Description

A vulnerability in the access validation of internal REST APIs of Cisco Secure Workload could allow an unauthenticated, remote attacker to access site resources with the privileges of the Site Admin role.

This vulnerability is due to insufficient validation and authentication when accessing REST API endpoints. An attacker could exploit this vulnerability if they are able to send a crafted API request to an affected endpoint. A successful exploit could allow the attacker to read sensitive information and make configuration changes across tenant boundaries with the privileges of the Site Admin user.

AI Analysis

AI processing failed - no valid JSON found

Basic Information

ID CVE-2026-20223

Source cisco

Published May 20, 2026 at 16:06

Affected Product

Vendor Cisco

Product Cisco Secure Workload

Version 2.2.1.41

Affected Versions Cisco Cisco Secure Workload 2.2.1.41
Cisco Cisco Secure Workload 3.2.1.18
Cisco Cisco Secure Workload 3.3.2.50
Cisco Cisco Secure Workload 3.4.1.28
Cisco Cisco Secure Workload 3.4.1.34
Cisco Cisco Secure Workload 2.3.1.45
Cisco Cisco Secure Workload 2.3.1.41
Cisco Cisco Secure Workload 3.3.2.28
Cisco Cisco Secure Workload 3.1.1.59
Cisco Cisco Secure Workload 2.0.2.20
Cisco Cisco Secure Workload 2.1.1.33
Cisco Cisco Secure Workload 2.1.1.29
Cisco Cisco Secure Workload 3.2.1.28
Cisco Cisco Secure Workload 3.4.1.35
Cisco Cisco Secure Workload 3.1.1.65
Cisco Cisco Secure Workload 3.1.1.67
Cisco Cisco Secure Workload 2.0.1.34
Cisco Cisco Secure Workload 2.3.1.49
Cisco Cisco Secure Workload 2.2.1.39
Cisco Cisco Secure Workload 3.4.1.19
Cisco Cisco Secure Workload 3.3.2.23
Cisco Cisco Secure Workload 3.1.1.61
Cisco Cisco Secure Workload 3.1.1.54
Cisco Cisco Secure Workload 3.5.1.17
Cisco Cisco Secure Workload 3.3.2.33
Cisco Cisco Secure Workload 3.5.1.1
Cisco Cisco Secure Workload 2.3.1.53
Cisco Cisco Secure Workload 3.5.1.20
Cisco Cisco Secure Workload 3.5.1.30
Cisco Cisco Secure Workload 3.3.2.16
Cisco Cisco Secure Workload 3.1.1.55
Cisco Cisco Secure Workload 3.4.1.6
Cisco Cisco Secure Workload 2.3.1.50
Cisco Cisco Secure Workload 2.3.1.52
Cisco Cisco Secure Workload 3.2.1.19
Cisco Cisco Secure Workload 2.2.1.35
Cisco Cisco Secure Workload 3.1.1.53
Cisco Cisco Secure Workload 3.1.1.70
Cisco Cisco Secure Workload 3.2.1.20
Cisco Cisco Secure Workload 3.5.1.2
Cisco Cisco Secure Workload 1.103.1.12
Cisco Cisco Secure Workload 2.3.1.51
Cisco Cisco Secure Workload 3.3.2.42
Cisco Cisco Secure Workload 3.4.1.1
Cisco Cisco Secure Workload 3.3.2.12
Cisco Cisco Secure Workload 2.1.1.31
Cisco Cisco Secure Workload 3.5.1.23
Cisco Cisco Secure Workload 3.3.2.53
Cisco Cisco Secure Workload 3.4.1.14
Cisco Cisco Secure Workload 3.3.2.2
Cisco Cisco Secure Workload 3.4.1.20
Cisco Cisco Secure Workload 3.3.2.35
Cisco Cisco Secure Workload 2.2.1.34
Cisco Cisco Secure Workload 1.102.21
Cisco Cisco Secure Workload 3.3.2.5
Cisco Cisco Secure Workload 3.5.1.31
Cisco Cisco Secure Workload 3.6.1.5
Cisco Cisco Secure Workload 3.2.1.31
Cisco Cisco Secure Workload 3.5.1.37
Cisco Cisco Secure Workload 3.4.1.40
Cisco Cisco Secure Workload 3.6.1.17
Cisco Cisco Secure Workload 3.6.1.21
Cisco Cisco Secure Workload 3.2.1.32
Cisco Cisco Secure Workload 3.2.1.33
Cisco Cisco Secure Workload 3.6.1.35
Cisco Cisco Secure Workload 3.6.1.36
Cisco Cisco Secure Workload 3.7.1.5
Cisco Cisco Secure Workload 3.6.1.47
Cisco Cisco Secure Workload 3.7.1.22
Cisco Cisco Secure Workload 3.6.1.52
Cisco Cisco Secure Workload 3.7.1.39
Cisco Cisco Secure Workload 3.8.1.1
Cisco Cisco Secure Workload 3.7.1.51
Cisco Cisco Secure Workload 3.8.1.19
Cisco Cisco Secure Workload 3.8.1.36
Cisco Cisco Secure Workload 3.7.1.59
Cisco Cisco Secure Workload 3.8.1.39
Cisco Cisco Secure Workload 3.9.1.1
Cisco Cisco Secure Workload 3.9.1.10
Cisco Cisco Secure Workload 3.9.1.24
Cisco Cisco Secure Workload 3.9.1.25
Cisco Cisco Secure Workload 3.9.1.28
Cisco Cisco Secure Workload 3.9.1.38
Cisco Cisco Secure Workload 3.8.1.53
Cisco Cisco Secure Workload 3.9.1.52
Cisco Cisco Secure Workload 3.10.1.1
Cisco Cisco Secure Workload 3.9.1.64
Cisco Cisco Secure Workload 3.10.2.11
Cisco Cisco Secure Workload 3.9.1.66
Cisco Cisco Secure Workload 3.10.3.19
Cisco Cisco Secure Workload 3.9.1.69
Cisco Cisco Secure Workload 3.10.4.8
Cisco Cisco Secure Workload 3.10.5.6
Cisco Cisco Secure Workload 4.0.1.1
Cisco Cisco Secure Workload 4.0.2.4
Cisco Cisco Secure Workload 4.0.2.5
Cisco Cisco Secure Workload 3.10.6.3
Cisco Cisco Secure Workload 3.10.7.4
Cisco Cisco Secure Workload 4.0.3.13

References

sec.cloudapps.cisco.com /security/center/content/CiscoSecurityAdvisory/cisco-sa-csw-pnbsa-g8WEnuy

{
    "lastseen": "",
    "description": "A vulnerability in the access validation of internal REST APIs of Cisco Secure Workload could allow an unauthenticated, remote attacker to access site resources with the privileges of the Site Admin role.\r\n\r\nThis vulnerability is due to insufficient validation and authentication when accessing REST API endpoints. An attacker could exploit this vulnerability if they are able to send a crafted API request to an affected endpoint. A successful exploit could allow the attacker to read sensitive information and make configuration changes across tenant boundaries with the privileges of the Site Admin user. ",
    "published": "2026-05-20T16:06:30.740Z",
    "modified": "2026-05-20T16:06:30.740Z",
    "type": "cve",
    "title": "Cisco Secure Workload Unauthorized API Access Vulnerability",
    "source": "cisco",
    "references": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-csw-pnbsa-g8WEnuy",
    "id": "CVE-2026-20223",
    "bulletinFamily": "",
    "cwe": null,
    "cvelist": null,
    "sourceData": "Cisco Cisco Secure Workload 2.2.1.41\nCisco Cisco Secure Workload 3.2.1.18\nCisco Cisco Secure Workload 3.3.2.50\nCisco Cisco Secure Workload 3.4.1.28\nCisco Cisco Secure Workload 3.4.1.34\nCisco Cisco Secure Workload 2.3.1.45\nCisco Cisco Secure Workload 2.3.1.41\nCisco Cisco Secure Workload 3.3.2.28\nCisco Cisco Secure Workload 3.1.1.59\nCisco Cisco Secure Workload 2.0.2.20\nCisco Cisco Secure Workload 2.1.1.33\nCisco Cisco Secure Workload 2.1.1.29\nCisco Cisco Secure Workload 3.2.1.28\nCisco Cisco Secure Workload 3.4.1.35\nCisco Cisco Secure Workload 3.1.1.65\nCisco Cisco Secure Workload 3.1.1.67\nCisco Cisco Secure Workload 2.0.1.34\nCisco Cisco Secure Workload 2.3.1.49\nCisco Cisco Secure Workload 2.2.1.39\nCisco Cisco Secure Workload 3.4.1.19\nCisco Cisco Secure Workload 3.3.2.23\nCisco Cisco Secure Workload 3.1.1.61\nCisco Cisco Secure Workload 3.1.1.54\nCisco Cisco Secure Workload 3.5.1.17\nCisco Cisco Secure Workload 3.3.2.33\nCisco Cisco Secure Workload 3.5.1.1\nCisco Cisco Secure Workload 2.3.1.53\nCisco Cisco Secure Workload 3.5.1.20\nCisco Cisco Secure Workload 3.5.1.30\nCisco Cisco Secure Workload 3.3.2.16\nCisco Cisco Secure Workload 3.1.1.55\nCisco Cisco Secure Workload 3.4.1.6\nCisco Cisco Secure Workload 2.3.1.50\nCisco Cisco Secure Workload 2.3.1.52\nCisco Cisco Secure Workload 3.2.1.19\nCisco Cisco Secure Workload 2.2.1.35\nCisco Cisco Secure Workload 3.1.1.53\nCisco Cisco Secure Workload 3.1.1.70\nCisco Cisco Secure Workload 3.2.1.20\nCisco Cisco Secure Workload 3.5.1.2\nCisco Cisco Secure Workload 1.103.1.12\nCisco Cisco Secure Workload 2.3.1.51\nCisco Cisco Secure Workload 3.3.2.42\nCisco Cisco Secure Workload 3.4.1.1\nCisco Cisco Secure Workload 3.3.2.12\nCisco Cisco Secure Workload 2.1.1.31\nCisco Cisco Secure Workload 3.5.1.23\nCisco Cisco Secure Workload 3.3.2.53\nCisco Cisco Secure Workload 3.4.1.14\nCisco Cisco Secure Workload 3.3.2.2\nCisco Cisco Secure Workload 3.4.1.20\nCisco Cisco Secure Workload 3.3.2.35\nCisco Cisco Secure Workload 2.2.1.34\nCisco Cisco Secure Workload 1.102.21\nCisco Cisco Secure Workload 3.3.2.5\nCisco Cisco Secure Workload 3.5.1.31\nCisco Cisco Secure Workload 3.6.1.5\nCisco Cisco Secure Workload 3.2.1.31\nCisco Cisco Secure Workload 3.5.1.37\nCisco Cisco Secure Workload 3.4.1.40\nCisco Cisco Secure Workload 3.6.1.17\nCisco Cisco Secure Workload 3.6.1.21\nCisco Cisco Secure Workload 3.2.1.32\nCisco Cisco Secure Workload 3.2.1.33\nCisco Cisco Secure Workload 3.6.1.35\nCisco Cisco Secure Workload 3.6.1.36\nCisco Cisco Secure Workload 3.7.1.5\nCisco Cisco Secure Workload 3.6.1.47\nCisco Cisco Secure Workload 3.7.1.22\nCisco Cisco Secure Workload 3.6.1.52\nCisco Cisco Secure Workload 3.7.1.39\nCisco Cisco Secure Workload 3.8.1.1\nCisco Cisco Secure Workload 3.7.1.51\nCisco Cisco Secure Workload 3.8.1.19\nCisco Cisco Secure Workload 3.8.1.36\nCisco Cisco Secure Workload 3.7.1.59\nCisco Cisco Secure Workload 3.8.1.39\nCisco Cisco Secure Workload 3.9.1.1\nCisco Cisco Secure Workload 3.9.1.10\nCisco Cisco Secure Workload 3.9.1.24\nCisco Cisco Secure Workload 3.9.1.25\nCisco Cisco Secure Workload 3.9.1.28\nCisco Cisco Secure Workload 3.9.1.38\nCisco Cisco Secure Workload 3.8.1.53\nCisco Cisco Secure Workload 3.9.1.52\nCisco Cisco Secure Workload 3.10.1.1\nCisco Cisco Secure Workload 3.9.1.64\nCisco Cisco Secure Workload 3.10.2.11\nCisco Cisco Secure Workload 3.9.1.66\nCisco Cisco Secure Workload 3.10.3.19\nCisco Cisco Secure Workload 3.9.1.69\nCisco Cisco Secure Workload 3.10.4.8\nCisco Cisco Secure Workload 3.10.5.6\nCisco Cisco Secure Workload 4.0.1.1\nCisco Cisco Secure Workload 4.0.2.4\nCisco Cisco Secure Workload 4.0.2.5\nCisco Cisco Secure Workload 3.10.6.3\nCisco Cisco Secure Workload 3.10.7.4\nCisco Cisco Secure Workload 4.0.3.13",
    "sourceHref": "",
    "cvss": {
        "score": 10,
        "severity": "CRITICAL",
        "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
        "version": "3.1"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "Cisco Secure Workload",
    "version": "2.2.1.41",
    "vendor": "Cisco",
    "ai_description": "AI processing failed - no valid JSON found",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}