Cisco flags five Secure Workload flaws, two earn perfect-ten scores, urges immediate patches
Cisco disclosed five security bugs in its Secure Workload product, assigning two perfect-ten severity ratings and urging both SaaS and on-prem users to apply updates.
Cisco revealed a suite of five flaws affecting its Secure Workload Software, previously called Tetration, which is intended to block lateral movement across networks. Severity scores were assigned as 10, 10, 9.9, 9.6 and 7.5, with CVE-2026-20315 and CVE-2026-20317 receiving perfect-ten marks for improper access-control weaknesses. Additional issues include command injection (CVE-2026-20231), input-validation failures (CVE-2026-20318) and out-of-bounds memory writes (CVE-2026-20319).
Cisco has patched the SaaS offering, but on-prem users must upgrade agents to version 3.10.9.1 or 4.0.4.16 depending on their current release. The bugs were uncovered during an internal security review that leveraged frontier AI models, possibly via Anthropic’s Mythos under Project Glasswing. Cisco states no malicious use of the vulnerabilities has been detected.
Why it matters
Enterprises using Cisco Secure Workload must apply patches to avoid potential network breaches.
In this story
