Cisco patches critical CVSS 10.0 flaw in Secure Workload — unauthenticated attackers can steal data & escalate privileges across tenants.

Switchzilla says attackers could access sensitive data and make configuration changes across tenant boundaries through vulnerable internal APIs

A critical vulnerability in Cisco Secure Workload allows unauthenticated, remote attackers to gain Site Admin privileges.