OpenAI · Google · The Register
Cisco flaw severity warning reads like Olympic gymnastics scores: 10, 10, 9.9, 9.6, and 7.5.
Compiled by KHAO Editorial — aggregated from 1 source. See llms.txt for citation guidance.
◌ Single Source
Secure Workload Software has five nasty flaws and even SaaS users have updates to install.
Key facts
- The 9.9-rated flaw is CVE-2026-20231, which describes issues related to “Improper neutralization of special elements (covers command, OS, argument injection)
- CVE-2026-20318 is the 9.6-er and is an improper input validation problem
- CVE-2026-20315 and CVE-2026-20317 are the two perfect-ten-rated bugs
- On-prem users who have deployed version 3.10 or earlier need to get to version 3.10.9.1
Summary
Cisco has revealed its Secure Workload Software, a micro-segmentation tool formerly known as Tetration that is supposed to stop attackers moving laterally across a network, has four critical flaws plus another high-severity bug. CVE-2026-20315 and CVE-2026-20317 are the two perfect-ten-rated bugs. Yet another Cisco SD-WAN 0-day under attack, and no patch in sight. The 9.9-rated flaw is CVE-2026-20231, which describes issues related to “Improper neutralization of special elements (covers command, OS, argument injection).”