Cisco Patches CVSS 10.0 Secure Workload REST API Flaw Enabling Data Access

Kurzinfo

Metadaten

Original (extern): Link oeffnen
Veroeffentlicht: 2026-05-22 05:36 UTC
Importiert: 2026-06-01 13:23 UTC
CVSS: 10.0
Quelle-ID: thn_global
uid_hash: 5e55a635362eff1cd65fb3fc8ccdc6e23bab4053a3f2609f5ca5b2a0fd467fd0

The Hacker News

Inhalt

Cisco has rolled out updates for a maximum-severity security flaw impacting Secure Workload that could allow an unauthenticated, remote attacker to access sensitive data.

Tracked as CVE-2026-20223 (CVSS score: 10.0), the vulnerability arises from insufficient validation and authentication when accessing REST API endpoints.

"An attacker could exploit this vulnerability if they are able to send

Verknuepfte CVEs

CVE-ID	Severity (Quelle)	CVSS (Quelle)	Severity (CVE.org)	CVSS (CVE.org)	EPSS	EPSS-Pctl	Veroeffentlicht (CVE.org)
CVE-2026-20223	CRITICAL	10	CRITICAL	10			2026-05-20

Quellen-Details

Bezeichnung	Name	Kategorie	Tags	Zielgruppe	Sprache	Feed-URL
The Hacker News	thn_global	security_news		-	de	https://feeds.feedburner.com/TheHackersNews

Zurueck zur Eintrags-Liste