Advisories
Cisco Issues Critical Hardening Patch for Secure Workload – Five CVEs Resolved
Cisco's Secure Workload engineering team released a hardening update in August 2026 after an internal review uncovered five critical vulnerabilities. The patches address CVE‑2026‑20231, CVE‑2026‑20315, CVE‑2026‑20317, CVE‑2026‑20318, and CVE‑2026‑20319. No workarounds are available, so customers must apply the updates immediately.
Cisco’s Secure Workload product line has just received a critical hardening release following a comprehensive internal security review. Five previously unknown weaknesses, all classified as critical, were discovered during internal testing and are not known to be actively exploited.
What’s Fixed
- CVE-2026-20231
- CVE-2026-20315
- CVE-2026-20317
- CVE-2026-20318
- CVE-2026-20319
Security Impact
Security Impact Rating: Critical
How to Update
Customers should download the latest Secure Workload firmware from the Cisco support portal and follow the standard upgrade procedure. The update package includes all necessary fixes for the five CVEs.
No Workarounds
There are currently no mitigations or workarounds to address these vulnerabilities. Immediate patching is required to maintain system integrity.
For more details, consult the Cisco Security Advisory documentation.
Related vulnerabilities
Cisco Catalyst SD‑WAN Hardening Update: Critical Vulnerabilities Resolved (CVE‑2026‑20303‑20313)
Cisco’s SD‑WAN software team released a hardening patch in August 2026 after an internal audit uncovered several critical weaknesses. Five CVEs—CVE‑2026‑20303, ‑20304, ‑20310, ‑20312, ‑20313—were addressed through a single update per CWE class. No workarounds exist, so all Catalyst SD‑WAN customers should apply the new releases immediately to close the gaps.
Read briefing
Cisco Hardens Secure Email Gateway with Critical Patch for Exploited SQL Injection
Cisco rolled out a hardening update for its Secure Email Gateway and Secure Email & Web Manager after an internal audit uncovered several critical flaws, including a live SQL injection exploit. The fix bundles five CVEs (CVE‑2026‑20353, 76440‑76443) into a single patch with no workarounds, demanding immediate action from customers to maintain email security.
Read briefing
Critical Cisco Hardening Release: ASA, FTD, FMC Patch Internal Exploits
Cisco’s security team has rolled out a hardening update for its Secure Firewall Adaptive Security Appliance, Threat Defense, and Management Center software, addressing a suite of internally discovered flaws. Eight CVEs (CVE‑2026‑20329 through CVE‑2026‑20336) cover issues ranging from static credential exposure to authentication bypass, with two vulnerabilities already being actively exploited. No workarounds exist; customers must install the patches promptly to mitigate the critical risk.
Read briefing
Cisco IOS XE Hardening Release Addresses 7 Critical CVEs – August 2026
Cisco’s IOS XE team rolled out a hardening update in August 2026 that patches seven critical vulnerabilities discovered during internal testing. No workarounds exist; customers should apply the latest firmware to mitigate the risks. The CVEs span multiple CWE categories and carry a Critical impact rating.
Read briefing