Cisco fixes CVSS 10.0 Secure Workload API auth bypass
Cisco released updates for Secure Workload that close a CVSS 10.0 vulnerability (CVE‑2026‑20223). The flaw allowed unauthenticated remote attackers to access internal REST API endpoints and read or modify tenant data with Site Admin privileges. Upgrading to the fixed releases (3.10.8.3 or later) mitigates the issue.