CVE-2026-20231
9.9
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Summary
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20231 are related to improper neutralization of special elements issues that are grouped under the Common Weakness Enumeration (CWE) CWE-74.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Cisco | Cisco Secure Workload | 2.2.1.41 | affected |
| Cisco | Cisco Secure Workload | 3.2.1.18 | affected |
| Cisco | Cisco Secure Workload | 3.3.2.50 | affected |
| Cisco | Cisco Secure Workload | 3.4.1.28 | affected |
| Cisco | Cisco Secure Workload | 3.4.1.34 | affected |
| Cisco | Cisco Secure Workload | 2.3.1.45 | affected |
| Cisco | Cisco Secure Workload | 2.3.1.41 | affected |
| Cisco | Cisco Secure Workload | 3.3.2.28 | affected |
| Cisco | Cisco Secure Workload | 3.1.1.59 | affected |
| Cisco | Cisco Secure Workload | 2.0.2.20 | affected |
| Cisco | Cisco Secure Workload | 2.1.1.33 | affected |
| Cisco | Cisco Secure Workload | 2.1.1.29 | affected |
| Cisco | Cisco Secure Workload | 3.2.1.28 | affected |
| Cisco | Cisco Secure Workload | 3.4.1.35 | affected |
| Cisco | Cisco Secure Workload | 3.1.1.65 | affected |
| Cisco | Cisco Secure Workload | 3.1.1.67 | affected |
| Cisco | Cisco Secure Workload | 2.0.1.34 | affected |
| Cisco | Cisco Secure Workload | 2.3.1.49 | affected |
| Cisco | Cisco Secure Workload | 2.2.1.39 | affected |
| Cisco | Cisco Secure Workload | 3.4.1.19 | affected |
| Cisco | Cisco Secure Workload | 3.3.2.23 | affected |
| Cisco | Cisco Secure Workload | 3.1.1.61 | affected |
| Cisco | Cisco Secure Workload | 3.1.1.54 | affected |
| Cisco | Cisco Secure Workload | 3.5.1.17 | affected |
| Cisco | Cisco Secure Workload | 3.3.2.33 | affected |
| Cisco | Cisco Secure Workload | 3.5.1.1 | affected |
| Cisco | Cisco Secure Workload | 2.3.1.53 | affected |
| Cisco | Cisco Secure Workload | 3.5.1.20 | affected |
| Cisco | Cisco Secure Workload | 3.5.1.30 | affected |
| Cisco | Cisco Secure Workload | 3.3.2.16 | affected |
| Cisco | Cisco Secure Workload | 3.1.1.55 | affected |
| Cisco | Cisco Secure Workload | 3.4.1.6 | affected |
| Cisco | Cisco Secure Workload | 2.3.1.50 | affected |
| Cisco | Cisco Secure Workload | 2.3.1.52 | affected |
| Cisco | Cisco Secure Workload | 3.2.1.19 | affected |
| Cisco | Cisco Secure Workload | 2.2.1.35 | affected |
| Cisco | Cisco Secure Workload | 3.1.1.53 | affected |
| Cisco | Cisco Secure Workload | 3.1.1.70 | affected |
| Cisco | Cisco Secure Workload | 3.2.1.20 | affected |
| Cisco | Cisco Secure Workload | 3.5.1.2 | affected |
| Cisco | Cisco Secure Workload | 1.103.1.12 | affected |
| Cisco | Cisco Secure Workload | 2.3.1.51 | affected |
| Cisco | Cisco Secure Workload | 3.3.2.42 | affected |
| Cisco | Cisco Secure Workload | 3.4.1.1 | affected |
| Cisco | Cisco Secure Workload | 3.3.2.12 | affected |
| Cisco | Cisco Secure Workload | 2.1.1.31 | affected |
| Cisco | Cisco Secure Workload | 3.5.1.23 | affected |
| Cisco | Cisco Secure Workload | 3.3.2.53 | affected |
| Cisco | Cisco Secure Workload | 3.4.1.14 | affected |
| Cisco | Cisco Secure Workload | 3.3.2.2 | affected |
| Cisco | Cisco Secure Workload | 3.4.1.20 | affected |
| Cisco | Cisco Secure Workload | 3.3.2.35 | affected |
| Cisco | Cisco Secure Workload | 2.2.1.34 | affected |
| Cisco | Cisco Secure Workload | 1.102.21 | affected |
| Cisco | Cisco Secure Workload | 3.3.2.5 | affected |
| Cisco | Cisco Secure Workload | 3.5.1.31 | affected |
| Cisco | Cisco Secure Workload | 3.6.1.5 | affected |
| Cisco | Cisco Secure Workload | 3.2.1.31 | affected |
| Cisco | Cisco Secure Workload | 3.5.1.37 | affected |
| Cisco | Cisco Secure Workload | 3.4.1.40 | affected |
| Cisco | Cisco Secure Workload | 3.6.1.17 | affected |
| Cisco | Cisco Secure Workload | 3.6.1.21 | affected |
| Cisco | Cisco Secure Workload | 3.2.1.32 | affected |
| Cisco | Cisco Secure Workload | 3.2.1.33 | affected |
| Cisco | Cisco Secure Workload | 3.6.1.35 | affected |
| Cisco | Cisco Secure Workload | 3.6.1.36 | affected |
| Cisco | Cisco Secure Workload | 3.7.1.5 | affected |
| Cisco | Cisco Secure Workload | 3.6.1.47 | affected |
| Cisco | Cisco Secure Workload | 3.7.1.22 | affected |
| Cisco | Cisco Secure Workload | 3.6.1.52 | affected |
| Cisco | Cisco Secure Workload | 3.7.1.39 | affected |
| Cisco | Cisco Secure Workload | 3.8.1.1 | affected |
| Cisco | Cisco Secure Workload | 3.7.1.51 | affected |
| Cisco | Cisco Secure Workload | 3.8.1.19 | affected |
| Cisco | Cisco Secure Workload | 3.8.1.36 | affected |
| Cisco | Cisco Secure Workload | 3.7.1.59 | affected |
| Cisco | Cisco Secure Workload | 3.8.1.39 | affected |
| Cisco | Cisco Secure Workload | 3.9.1.1 | affected |
| Cisco | Cisco Secure Workload | 3.9.1.10 | affected |
| Cisco | Cisco Secure Workload | 3.9.1.24 | affected |
| Cisco | Cisco Secure Workload | 3.9.1.25 | affected |
| Cisco | Cisco Secure Workload | 3.9.1.28 | affected |
| Cisco | Cisco Secure Workload | 3.9.1.38 | affected |
| Cisco | Cisco Secure Workload | 3.8.1.53 | affected |
| Cisco | Cisco Secure Workload | 3.9.1.52 | affected |
| Cisco | Cisco Secure Workload | 3.10.1.1 | affected |
| Cisco | Cisco Secure Workload | 3.9.1.64 | affected |
| Cisco | Cisco Secure Workload | 3.10.2.11 | affected |
| Cisco | Cisco Secure Workload | 3.9.1.66 | affected |
| Cisco | Cisco Secure Workload | 3.10.3.19 | affected |
| Cisco | Cisco Secure Workload | 3.9.1.69 | affected |
| Cisco | Cisco Secure Workload | 3.10.4.8 | affected |
| Cisco | Cisco Secure Workload | 3.10.5.6 | affected |
| Cisco | Cisco Secure Workload | 4.0.1.1 | affected |
| Cisco | Cisco Secure Workload | 4.0.2.4 | affected |
| Cisco | Cisco Secure Workload | 4.0.2.5 | affected |
| Cisco | Cisco Secure Workload | 3.10.6.3 | affected |
| Cisco | Cisco Secure Workload | 3.10.7.4 | affected |
| Cisco | Cisco Secure Workload | 4.0.3.13 | affected |
| Cisco | Cisco Secure Workload | 4.0.3.17 | affected |
| Cisco | Cisco Secure Workload | 3.10.8.3 | affected |
Weaknesses
- CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
ADP Enrichment
Additional References
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: no
- Technical Impact: total
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.