Affected Vendors
- Cisco: 4 CVEs (1 Critical, 3 Medium)
This week brought a modest but critical update to the router vulnerability landscape, with all four new CVEs originating from Cisco. While the volume is relatively light, the presence of a perfect 10.0 CVSS score demands immediate attention from network administrators managing Cisco infrastructure.
Critical Priority
CVE-2026-20223 (CVSS 10.0) stands out as the most severe vulnerability this week. This critical flaw affects Cisco Secure Workload and stems from improper access validation in internal REST APIs. An unauthenticated, remote attacker can exploit this to access site resources with elevated privileges. Action required: If you manage Cisco Secure Workload deployments, check Cisco's security advisory immediately for available patches and apply them without delay.
Medium-Severity Updates
Three medium-severity CVEs round out the week, all impacting different Cisco products:
- CVE-2026-20171 (CVSS 6.8) affects Cisco Nexus 3000 and 9000 Series Switches in standalone NX-OS mode. A flaw in BGP enforce-first-as feature validation could be exploited by authenticated users.
- CVE-2026-20206 (CVSS 6.3) impacts the BrowserBot component of Cisco ThousandEyes Enterprise Agent, allowing authenticated remote attackers to execute arbitrary commands.
- CVE-2026-20199 (CVSS 4.7) involves improper SSL certificate handling in Cisco ThousandEyes Virtual Appliance, permitting authenticated attackers to execute OS-level commands.
Recommendation: Review your Cisco product inventory and cross-reference affected versions against these CVEs. Prioritize patching CVE-2026-20223 first, then schedule updates for the medium-severity issues in your maintenance windows.