Cisco serves up yet another perfect 10 bug with Secure Workload admin flaw

Cisco disclosed a critical vulnerability (CVE-2026-20223) with a perfect 10.0 CVSS score in its Secure Workload platform that allows unauthenticated attackers to gain Site Admin privileges and access sensitive information across tenant boundaries. The flaw affects both SaaS and on-premises deployments and requires patching to version 3.10.8.3 or 4.0.3.17, though cloud-hosted instances have already been remediated. This marks the latest in a series of maximum-severity security flaws discovered in Cisco infrastructure products.