CVE-2026-20317

Medienbericht

EPSS 0.34%
Veröffentlicht 19.08.2026 16:19:28
Zuletzt bearbeitet 20.08.2026 16:17:21
Erkennungen
Login

Cisco Secure Workload Software Security Hardening Release August 2026 - Improper Authentication Vulnerabilities

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.

The vulnerabilities tracked by CVE-2026-20317 are related to improper authentication issues that are grouped under the Common Weakness Enumeration (CWE) CWE-287.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 8

CNA 1 VulnDex Vulnerability Enrichment 1

Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).

HerstellerCisco

≫

Produkt Cisco Secure Workload

Default Statusunknown

Version 2.2.1.41

Status affected

Version 3.2.1.18

Status affected

Version 3.3.2.50

Status affected

Version 3.4.1.28

Status affected

Version 3.4.1.34

Status affected

Version 2.3.1.45

Status affected

Version 2.3.1.41

Status affected

Version 3.3.2.28

Status affected

Version 3.1.1.59

Status affected

Version 2.0.2.20

Status affected

Version 2.1.1.33

Status affected

Version 2.1.1.29

Status affected

Version 3.2.1.28

Status affected

Version 3.4.1.35

Status affected

Version 3.1.1.65

Status affected

Version 3.1.1.67

Status affected

Version 2.0.1.34

Status affected

Version 2.3.1.49

Status affected

Version 2.2.1.39

Status affected

Version 3.4.1.19

Status affected

Version 3.3.2.23

Status affected

Version 3.1.1.61

Status affected

Version 3.1.1.54

Status affected

Version 3.5.1.17

Status affected

Version 3.3.2.33

Status affected

Version 3.5.1.1

Status affected

Version 2.3.1.53

Status affected

Version 3.5.1.20

Status affected

Version 3.5.1.30

Status affected

Version 3.3.2.16

Status affected

Version 3.1.1.55

Status affected

Version 3.4.1.6

Status affected

Version 2.3.1.50

Status affected

Version 2.3.1.52

Status affected

Version 3.2.1.19

Status affected

Version 2.2.1.35

Status affected

Version 3.1.1.53

Status affected

Version 3.1.1.70

Status affected

Version 3.2.1.20

Status affected

Version 3.5.1.2

Status affected

Version 1.103.1.12

Status affected

Version 2.3.1.51

Status affected

Version 3.3.2.42

Status affected

Version 3.4.1.1

Status affected

Version 3.3.2.12

Status affected

Version 2.1.1.31

Status affected

Version 3.5.1.23

Status affected

Version 3.3.2.53

Status affected

Version 3.4.1.14

Status affected

Version 3.3.2.2

Status affected

Version 3.4.1.20

Status affected

Version 3.3.2.35

Status affected

Version 2.2.1.34

Status affected

Version 1.102.21

Status affected

Version 3.3.2.5

Status affected

Version 3.5.1.31

Status affected

Version 3.6.1.5

Status affected

Version 3.2.1.31

Status affected

Version 3.5.1.37

Status affected

Version 3.4.1.40

Status affected

Version 3.6.1.17

Status affected

Version 3.6.1.21

Status affected

Version 3.2.1.32

Status affected

Version 3.2.1.33

Status affected

Version 3.6.1.35

Status affected

Version 3.6.1.36

Status affected

Version 3.7.1.5

Status affected

Version 3.6.1.47

Status affected

Version 3.7.1.22

Status affected

Version 3.6.1.52

Status affected

Version 3.7.1.39

Status affected

Version 3.8.1.1

Status affected

Version 3.7.1.51

Status affected

Version 3.8.1.19

Status affected

Version 3.8.1.36

Status affected

Version 3.7.1.59

Status affected

Version 3.8.1.39

Status affected

Version 3.9.1.1

Status affected

Version 3.9.1.10

Status affected

Version 3.9.1.24

Status affected

Version 3.9.1.25

Status affected

Version 3.9.1.28

Status affected

Version 3.9.1.38

Status affected

Version 3.8.1.53

Status affected

Version 3.9.1.52

Status affected

Version 3.10.1.1

Status affected

Version 3.9.1.64

Status affected

Version 3.10.2.11

Status affected

Version 3.9.1.66

Status affected

Version 3.10.3.19

Status affected

Version 3.9.1.69

Status affected

Version 3.10.4.8

Status affected

Version 3.10.5.6

Status affected

Version 4.0.1.1

Status affected

Version 4.0.2.4

Status affected

Version 4.0.2.5

Status affected

Version 3.10.6.3

Status affected

Version 3.10.7.4

Status affected

Version 4.0.3.13

Status affected

Version 4.0.3.17

Status affected

Version 3.10.8.3

Status affected

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.34%	0.275

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
Cisco PSIRT	10	3.9	5.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H

CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.

VulnDex Intel

Media Report

24.08.2026 18:15

Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.

VulnDex Intel

Media Report

21.08.2026 13:37

Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.

VulnDex Intel

Media Report

20.08.2026 10:05

https://www.cve.org/Media/News/item/blog/2026/06/16/Preserving-Vulnerability-Level-Identification

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-csw1-shSvndWP

https://nvd.nist.gov/vuln/detail/CVE-2026-20317

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2026-20317

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2026-20317

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2026-20317