CVE-2026-20330Disclosure

MEDIUMCVSS 9.9 · CRITICAL

Exploitation ongoing with high activity in latest observed window (1 mentions)

Immediate actions

Patch affected systems immediately
Assume compromise if assets are exposed

Recommended action window: Immediate (within 24h)

NVD description

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure Firewall Management Center Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.   The vulnerabilities tracked by CVE-2026-20330 are related to improper neutralization issues that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-707.

Back to dashboard

4.0/ 10 priority

Sources & remediation

Other references

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-asaftdfmc-uvpPROhN

Weakness type (CWE)

CWE-707

Priority

MEDIUM

Exploitation

ACTIVE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

Active exploitation appears in 1 classified signals
Patch or workaround signal is available
2 mentions across 2 observed days
Momentum state: stable

What's happening

Active exploitation reported across 1 signal
Patch or workaround mentioned in 1 signal
Technical details provided in 2 signals
Disclosure: 1 classified signal
Peaked 1d ago at 1 mentions (2026-09-16); latest day: 1
2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d

Signal classification2 categories

Disclosure

150.0%

Active Exploitation

150.0%

Referenced assets2 URLs

By indicator

Classification over time

Date	Total	Labels

2026-09-16	1	Disclosure1
2026-09-17	1	Active Exploitation1

Full discourse2 posts

Rıdvan Yağlı@ridvanyagli45d
Active Exploitation
🔴 Cisco, ISE ve Secure Firewall ürünlerinde çok sayıda kritik güvenlik açığını yayınladı! • CVE-2026-76460 — CVSS 10.0: Cisco ISE authentication bypass. Kimlik doğrulaması gerektirmiyor ve aktif olarak sömürülüyor. • CVE-2026-76423 — CVSS 10.0: ISE/ISE-PIC REST API authentication bypass. Unauthenticated admin access mümkün. • CVE-2026-20130 — CVSS 10.0: ISE/ISE-PIC injection sınıfı kritik açık. • CVE-2026-20192 — CVSS 10.0: ISE/ISE-PIC improper access control. • CVE-2026-20242 — CVSS 9.8: Secure FMC'de unauthenticated RCE, root yetkisiyle. • CVE-2026-20307 — CVSS 9.9: ISE'de authenticated RCE. • CVE-2026-20330 — CVSS 9.9: ASA/FTD/FMC'de kritik CWE-707 güvenlik açığı. Cisco, bu açıklar için güvenlik güncellemeleri yayınladı; ilgili advisories'de workaround bulunmadığı belirtiliyor. https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-ise-XU5EwX5T
Post summary
The tweet announces multiple critical Cisco ISE and FMC CVEs, notes that Cisco released security patches with no workarounds, and claims at least one vulnerability is actively exploited in the wild.
00022472
2.5K followersView on X
Kaitan ID Security@KaitanSecurity46d
Disclosure
🚨 CRITICAL — CVE-2026-20330 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security App… CVSS 9.9 🔴 No patch yet Full analysis → https://sec.kaitan.id/cves/CVE-2026-20330 #Cisco #CyberSecurity #InfoSec
Post summary
The tweet discloses a newly identified critical Cisco vulnerability (CVE-2026-20330) with a CVSS score of 9.9 and notes that no patch is currently available.
0000032
90 followersView on X

Explore more

Back to dashboard