Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability in the DNS over TCP implementation of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the TCP DNS response handler to unexpectedly restart, causing the device to reload. This vulnerability is due to a logic error when parsing a DNS query and tracking the size of the incoming buffers. An attacker could exploit this vulnerability by formatting a crafted reply to a DNS query sent from the targeted device. A successful exploit could allow the attacker to cause the device to reload, causing a denial of service (DoS) condition. Note: The attacker must be able to respond to DNS queries from the device, either by controlling the DNS service or through a machine-in-the-middle attack.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
A new vulnerability with increased severity was disclosed for Cisco Secure Firewall Adaptive Security Appliance Software and Secure Firewall Threat Defense Software (CVE-2026-20248) https://vuldb.com/vuln/406187
Post summary
The tweet announces a newly disclosed vulnerability (CVE-2026-20248) affecting Cisco Secure Firewall ASA and Threat Defense software, noting increased severity, and includes a link to a vulnerability database.