VulnSocial

CVE-2026-20349Active Exploitation(cisco / adaptive_security_appliance_software)

CRITICALCVSS 8.6 · HIGHCISA KEV

Exploitation observed; activity peaked at 33 mentions and remains active

Immediate actions

  • Patch cisco adaptive_security_appliance_software systems immediately
  • Assume compromise if assets are exposed
  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft

Recommended action window: Immediate (within 24h)

NVD description

A vulnerability in the Remote Access SSL VPN service for Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition.  This vulnerability is due to insufficient error checking when processing HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to the Remote Access SSL VPN service on an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition.

cisco CVEsBack to dashboard
8.5/ 10 priority

Sources & remediation

Listed in the CISA Known Exploited Vulnerabilities catalog. Federal remediation due date: 2026-08-14. Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.

Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-244

Priority

CRITICAL

Exploitation

ACTIVE

PoC

YES

Patch

AVAILABLE

Momentum

DECLINING

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • adaptive_security_appliance_software
  • secure_firewall_threat_defense

Threat summary

  • Active exploitation appears in 74 classified signals
  • Public PoC and exploit tooling are both present
  • Patch or workaround signal is available
  • 103 mentions across 16 observed days

What's happening

  • Active exploitation reported across 74 signals
  • Exploit tool or code specified in 1 signal
  • PoC mentioned or linked in 6 signals
  • Patch or workaround mentioned in 52 signals
  • Technical details provided in 75 signals
  • Disclosure: 12 classified signals
  • Peaked 14d ago at 33 mentions (2026-08-12); latest day: 1
  • 103 total mentions across 16 days

Affected systems

Vendors
cisco
Products
adaptive_security_appliance_softwaresecure_firewall_threat_defense

197 versions affected across 2 products

Deep dive

Activity timeline103 mentions / 16d
08172533Mentions · 2026-08-11: 7Mentions · 2026-08-12: 33Mentions · 2026-08-13: 31Mentions · 2026-08-14: 11Mentions · 2026-08-15: 2Mentions · 2026-08-16: 2Mentions · 2026-08-18: 3Mentions · 2026-08-19: 5Mentions · 2026-08-20: 1Mentions · 2026-08-21: 2Mentions · 2026-08-22: 1Mentions · 2026-08-23: 1Mentions · 2026-08-24: 1Mentions · 2026-09-04: 1Mentions · 2026-09-05: 1Mentions · 2026-09-17: 1PoC Mentioned / Linked · 2026-08-11: 2PoC Mentioned / Linked · 2026-08-13: 2PoC Mentioned / Linked · 2026-08-14: 1PoC Mentioned / Linked · 2026-08-19: 1Exploit Tool / Code · 2026-08-13: 1Active Exploitation · 2026-08-11: 6Active Exploitation · 2026-08-12: 23Active Exploitation · 2026-08-13: 24Active Exploitation · 2026-08-14: 7Active Exploitation · 2026-08-16: 1Active Exploitation · 2026-08-18: 3Active Exploitation · 2026-08-19: 3Active Exploitation · 2026-08-20: 1Active Exploitation · 2026-08-21: 2Active Exploitation · 2026-08-23: 1Active Exploitation · 2026-08-24: 1Active Exploitation · 2026-09-04: 1Active Exploitation · 2026-09-05: 1Patch / Workaround · 2026-08-11: 3Patch / Workaround · 2026-08-12: 16Patch / Workaround · 2026-08-13: 21Patch / Workaround · 2026-08-14: 3Patch / Workaround · 2026-08-15: 1Patch / Workaround · 2026-08-16: 1Patch / Workaround · 2026-08-18: 2Patch / Workaround · 2026-08-19: 1Patch / Workaround · 2026-08-21: 2Patch / Workaround · 2026-08-23: 1Patch / Workaround · 2026-08-24: 1Technical Details · 2026-08-11: 6Technical Details · 2026-08-12: 24Technical Details · 2026-08-13: 20Technical Details · 2026-08-14: 8Technical Details · 2026-08-15: 2Technical Details · 2026-08-16: 2Technical Details · 2026-08-18: 3Technical Details · 2026-08-19: 3Technical Details · 2026-08-21: 2Technical Details · 2026-08-22: 1Technical Details · 2026-08-23: 1Technical Details · 2026-08-24: 1Technical Details · 2026-09-04: 1Technical Details · 2026-09-05: 108-1108-1208-1308-1408-1508-1608-1808-1908-2008-2108-2208-2308-2409-0409-0509-17
Signal classification4 categories
Active Exploitation
6462.7%
Patch
1716.7%
Disclosure
1211.8%
General
98.8%
Referenced assets70 URLs
By indicator
Classification over time
DateTotalLabels
2026-08-117
Active Exploitation6Disclosure1
2026-08-1233
Active Exploitation19Disclosure4General1Patch8
2026-08-1331
Active Exploitation18Disclosure2General3Patch8
2026-08-1411
Active Exploitation7Disclosure2General2
2026-08-152
Disclosure1Patch1
2026-08-162
Active Exploitation1Disclosure1
2026-08-183
Active Exploitation3
2026-08-195
Active Exploitation3Disclosure1General1
2026-08-201
Active Exploitation1
2026-08-212
Active Exploitation2
2026-08-221
General1
2026-08-231
Active Exploitation1
2026-08-241
Active Exploitation1
2026-09-041
Active Exploitation1
2026-09-051
Active Exploitation1
2026-09-171
General1
Full discourse20 posts
  • The Hacker News@TheHackersNews
    Active Exploitation

    🛑 Exploited Cisco firewall flaw can remotely crash affected devices. CVE-2026-20349 affects certain ASA and FTD configurations. A crafted HTTP request can force a device reload and cause a denial-of-service condition. Cisco says exploitation is already underway and no workaround exists. Patch now: https://thehackernews.com/2026/08/cisco-asa-and-ftd-flaw-exploited-in.html

    Post summary

    CVE-2026-20349 is actively being exploited, causing ASA and FTD devices to crash via a crafted HTTP request, and Cisco has issued a patch with no current workaround.

    25221493935.6K
    2.4M followersView on X
  • Cyber Security News@The_Cyber_News
    Active Exploitation

    🚨 Cisco 0-day is being exploited RIGHT NOW — CVE-2026-20349 can crash ASA/FTD SSL VPN with one crafted request. No login needed. Patch ASAP Full Details: https://cybersecuritynews.com/cisco-firewall-0-day-vulnerability/ #cybersecuritynews #vulnerability https://t.co/w0xZQIzSRY

    Post summary

    The tweet alerts that a new Cisco ASA/FTD SSL VPN 0‑day is currently being exploited in the wild, urging users to apply patches immediately.

    1371112266.4K
    74.2K followersView on X
  • CISA Cyber@CISACyber
    Active Exploitation

    🛡️We added Cisco Secure Firewall vulnerability CVE-2026-20349, Microsoft Windows vulnerability CVE-2026-68820 & Metabase vulnerability CVE-2026-72898 to our KEV Catalog. Visit https://go.dhs.gov/Z3Q & apply mitigations to protect your org from cyberattacks. #Cybersecurity https://t.co/iahRvhwOoT

    Post summary

    The tweet announces that several CVEs were added to the DHS KEV catalog and urges organizations to apply mitigations against potential active exploitation.

    27022210.1K
    302.7K followersView on X
  • DarkFeed@ido_cohen2
    Active Exploitation

    ⚠️ Newly-Exploited Vulnerability in Cisco Firewalls • CVE: CVE-2026-20349 • Vendor: Cisco • Affects: ASA & FTD firewalls • Impact: Remote DoS risk • Not linked to ransomware Apply mitigations by 2026-08-14. Full report: 🔗 https://darkfeed.io #Cisco #CyberSecurity #Vulnerability

    Post summary

    Cisco ASA & FTD firewalls face a remote DoS vulnerability (CVE-2026-20349) that is already being exploited in the wild. Mitigations should be applied before 2026-08-14.

    0201322.2K
    48.3K followersView on X
  • おさじ｜AIじっちゃん｜FIREからの再起動@osamucap
    Disclosure

    【セキュリティ速報（2026/08/14）】 Cisco ASA/FTD の VPN 脆弱性（CVE-2026-20349）に米 CISA が本日8/14までの緊急対処を要求。 またランサムウェア活動グループが過去最高の93組織に急増！寡占から分散化が進み中小・サプライチェーンへの攻撃が拡大中。 #サイバーセキュリティ #脆弱性 #Cisco #ランサムウェア #ITニュース

    Post summary

    CISA demands emergency measures for Cisco ASA/FTD VPN vulnerability CVE-2026-20349, but the post provides no technical details, patches, or exploit information.

    20060297
    4.1K followersView on X
  • Cyber_OSINT@Cyber_O51NT
    Active Exploitation

    Cisco warned that CVE-2026-20349 in ASA/FTD software has been exploited in the wild, allowing unauthenticated remote attackers to trigger a high-severity DoS via HTTP request processing. https://thehackernews.com/2026/08/cisco-asa-and-ftd-flaw-exploited-in.html

    Post summary

    Cisco warns of active exploitation of CVE‑2026‑20349 in ASA/FTD, enabling unauthenticated attackers to trigger a high‑severity DoS via HTTP request processing.

    01070885
    22.9K followersView on X
  • DFIR Radar@DFIR_Radar
    Active Exploitation

    CVE-2026-20349 (CVSS 8.6), actively exploited and in CISA KEV, lets an unauthenticated attacker crash any Cisco ASA or FTD with SSL VPN exposed via one crafted HTTP request. #DFIR_Radar https://t.co/c68cyNXrKH

    Post summary

    CVE‑2026‑20349 is a high‑severity flaw that allows unauthenticated attackers to crash Cisco ASA or FTD servers via a single crafted HTTP request to an exposed SSL VPN, and it is actively exploited in the wild, as confirmed by CISA KEV.

    11121409
    1.9K followersView on X
  • National CERT/CC@CERT_UG
    Active Exploitation

    🚨 August 13 Patch Advisories Cisco ASA and FTD (CVE-2026-20349): actively exploited, no patch yet. One request crashes your VPN gateway. Windows DNS Server (CVE-2026-62878, CVSS 9.8): unauthenticated RCE, no credentials needed. Windows Container Driver (CVE-2026-72971). https://t.co/oVbQUMBJjk

    Post summary

    The advisory highlights that CVE-2026-20349 on Cisco ASA and FTD is actively exploited and not yet patched, while CVE-2026-62878 on Windows DNS Server presents an unauthenticated RCE with high CVSS, and CVE-2026-72971 on Windows Container Driver is referenced by a link.

    02040315
    1.5K followersView on X
  • Valerio Brussani@val_brux
    Disclosure

    In August, I reported a vulnerability in Cisco ASA, now published as CVE-2026-20349 (CVSS 8.6). Hope to be able to do a blog post soon about this. https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-vpn-dos-dzv4mQFF

    Post summary

    The author reported discovering a new Cisco ASA vulnerability (CVE-2026-20349) with a CVSS score of 8.6 and linked to Cisco's security advisory, without mentioning any PoC, exploit code, or active exploitation.

    00050409
    3.0K followersView on X
  • SOCRadar®@socradar
    Active Exploitation

    Cisco admins, brace yourselves. 🚨 CVE-2026-20349 is being actively exploited in the wild. Unauthenticated attackers are using crafted HTTP requests to force reloads on ASA and FTD devices. If your SSL VPN or ZTNA is internet-facing, you're a target. It’s DoS, not RCE, but downtime still hurts. https://hubs.la/Q04sL5gV0 #CyberSecurity #Cisco #NetSec #InfoSec #VPN

    Post summary

    The post claims that CVE‑2026‑20349 is currently being exploited in the wild, causing a denial‑of‑service through crafted HTTP requests that force reloads on Cisco ASA and FTD devices, primarily affecting internet‑facing SSL VPN or ZTNA deployments.

    00041748
    7.1K followersView on X
  • GovCERT.CZ@GOVCERT_CZ
    Active Exploitation

    🚨Upozorňujeme na aktivně zneužívanou zranitelnost v Cisco Secure Firewall ASA a Cisco Secure Firewall FTD, CVE-2026-20349. Zranitelnost je způsobena nedostatečnou kontrolou chyb při zpracování HTTP požadavků ve službě Remote Access SSL VPN. Neautentizovaný vzdálený útočník může zasláním speciálně upraveného HTTP požadavku způsobit restart postiženého zařízení, což vede ke stavu odmítnutí služby (DoS). Ohrožena jsou zařízení používající zranitelnou verzi Cisco Secure Firewall ASA Software nebo Cisco Secure Firewall FTD Software s povolenou konfigurací IKEv2 Remote Access VPN (client-services), SSL VPN nebo Zero Trust Network Access. Zranitelné jsou verze Cisco Secure Firewall ASA 9.16, 9.18, 9.20, 9.22, 9.23 a 9.24 a Cisco Secure Firewall FTD 7.0, 7.2, 7.4, 7.6, 7.7 a 10.0. 📌Doporučujeme aktualizovat na nejnovější verzi.

    Post summary

    The post alerts that CVE‑2026‑20349 is actively exploited in Cisco Secure Firewall ASA and FTD devices, leading to DoS via crafted HTTP requests, and recommends upgrading firmware to mitigate the risk.

    010301.0K
    4.3K followersView on X
  • Canadian Centre for Cyber Security@cybercentre_ca
    General

    #CyberAlert | AL26-018 - Vulnerability affecting Cisco ASA and Secure Firewall Threat Defense Software Remote Access SSL VPN - CVE-2026-20349 https://www.cyber.gc.ca/en/alerts-advisories/al26-018-vulnerability-affecting-cisco-asa-secure-firewall-threat-defense-software-remote-access-ssl-vpn-cve-2026-20349 https://t.co/pU0uFYBROi

    Post summary

    The tweet announces a cybersecurity alert for CVE-2026-20349 affecting Cisco ASA/Firewall Remote Access SSL VPN and directs to a Canadian cyber alert page, but provides no PoC, exploit details, active exploitation evidence, or patch information.

    000311.1K
    34.0K followersView on X
  • YourDailyCVE@YourDailyCVE

    🚨 CVE-of-the-Day: CVE-2026-20349 — Cisco firewalls ASA/FTD, unauth remote DoS CVSS: 8.6 | EPSS: N/A (too new to be scored) One crafted HTTP request to the Remote Access SSL VPN service crashes the device and forces a reload. No login needed. Exploited as a zero-day. Why it matters: ASA (Adaptive Security Appliance) and FTD (Firewall Threat Defense) are Cisco's firewall lines that sit at the network edge, running remote-access VPN for employees connecting in. Insufficient error checking on incoming HTTP requests lets an unauthenticated attacker crash the device on demand (DoS — knocks it offline, no data theft). Status: Actively exploited, discovered during Cisco's internal testing and independently reported by researcher Valerio Brussani. Added to CISA KEV Aug 11 with an Aug 14 remediation deadline. Cisco hasn't shared attacker details or IOCs yet. Fix it: Patches are out — update ASA/FTD now per Cisco's advisory. Can't patch today? Cisco's advisory lists workarounds for restricting exposure of the Remote Access SSL VPN service. 🔗 Source: Cisco Security Advisory #Cisco #NetworkSecurity #CVE #infosec #firewall

    01030118
    31 followersView on X
  • piyokango@piyokango
    Active Exploitation

    米国CISAが悪用を確認した脆弱性 #KEV をカタログに追加しました。（08/11追加） #vulnerability 🛡CVE-2026-20349 Cisco Secure Firewall Adaptive Security Appliance (ASA) and Firewall Threat Defense (FTD) Heap Inspection Vulnerability ✅概要 ・深刻度：重要 8.6 (CVSS Base) / Cisco Systems, Inc. (CNA) ・種別：解放前のヒープメモリの不適切なクリア（ヒープ検査） (CWE-244) ・CVSS:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H Cisco Secure Firewall ASA Software および Cisco Secure FTD Software の Remote Access SSL VPN サービスに存在する脆弱性です。 HTTP リクエスト処理時のエラーチェック不備により、未認証のリモート攻撃者が細工した HTTP リクエストを送信することで、対象デバイスを予期せず再読み込みさせる可能性があります。 悪用に成功した場合、DoS 状態につながる可能性があります。 ✅ChatGPTによる脆弱性評価 ・国内影響度：高 ・悪用難易度：低 ✅CISA 評価 ・攻撃自動化：自動化は可能 ・技術的影響：部分的 ・BOD 26-04 対処期限（露出あり）：2026年8月14日 ・BOD 26-04 対処期限（露出なし）：2026年8月25日 ✅攻撃前提条件 ・Cisco Secure Firewall ASA Software または Cisco Secure FTD Software を使用している ・Remote Access SSL VPN サービスが有効である ・攻撃者が対象デバイスの SSL VPN サービスへネットワーク経由でアクセスできる ・攻撃者は認証情報を必要としない ・Cisco が提供する修正済みソフトウェアへ更新されていない ✅悪用時影響 ・対象デバイスを予期せず再読み込みさせられる可能性がある ・Remote Access SSL VPN サービスの可用性に影響が生じる可能性がある ・Cisco ASA / FTD デバイスで DoS 状態が発生する可能性がある ・VPN 接続や関連ネットワークサービスに影響が及ぶ可能性がある ✅悪用事例等に関する公開情報 ・PoC/Exploit：公開情報確認できず ・ITW：未確認 ・概要：Cisco の一次情報では、Remote Access SSL VPN サービスに対する細工した HTTP リクエストによりデバイスの再読み込みと DoS が発生し得ることが説明 ✅関連情報 ・https://nvd.nist.gov/vuln/detail/CVE-2026-20349 ・https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-vpn-dos-dzv4mQFF ・https://github.com/cisagov/vulnrichment/blob/develop/2026/20xxx/CVE-2026-20349.json ・https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-20349 🛡CVE-2026-68820 Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability ✅概要 ・深刻度：重要 7.0 (CVSS Base) / Microsoft Corporation (CNA) ・種別：解放済みメモリの使用 (CWE-416) ・CVSS:CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Microsoft Windows Ancillary Function Driver for WinSock に存在する、解放済みメモリ使用の脆弱性です。 認証済みのローカル攻撃者が悪用することで、権限を昇格できる可能性があります。 影響を受ける製品には Windows 10、Windows 11、Windows Server 2012 以降の複数バージョンが含まれます。 ✅ChatGPTによる脆弱性評価 ・国内影響度：高 ・悪用難易度：高 ✅CISA 評価 ・攻撃自動化：自動化は困難 ・技術的影響：完全制御 ・BOD 26-04 対処期限（露出あり）：2026年8月14日 ・BOD 26-04 対処期限（露出なし）：2026年8月25日 ✅攻撃前提条件 ・影響を受ける Windows または Windows Server を使用している ・攻撃者が対象システム上でローカル実行可能な状態である ・攻撃者が低権限以上の認証済み権限を持っている ・攻撃者が Windows Ancillary Function Driver for WinSock の脆弱な処理を呼び出せる ・Microsoft が提供する修正済み更新プログラムが適用されていない ✅悪用時影響 ・ローカル権限昇格につながる可能性がある ・攻撃者に高権限でコードを実行される可能性がある ・機密性、完全性、可用性に高い影響が生じる可能性がある ・侵害済み端末上で横展開や永続化の足掛かりに利用される可能性がある ✅悪用事例等に関する公開情報 ・PoC/Exploit：公開情報確認できず ・ITW：確認済み（Microsoft） ・概要：Microsoft は、Windows Ancillary Function Driver for WinSock の use-after-free により、認証済み攻撃者がローカルで権限昇格できると説明 ✅関連情報 ・https://nvd.nist.gov/vuln/detail/CVE-2026-68820 ・https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68820 ・https://github.com/cisagov/vulnrichment/blob/develop/2026/68xxx/CVE-2026-68820.json ・https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-68820 🛡CVE-2026-72898 Metabase SQL Injection Vulnerability ✅概要 ・深刻度：緊急 10.0 (CVSS Base) / Metabase (CNA) ・種別：SQLコマンドに使用される特殊要素の不適切な無害化（SQLインジェクション） (CWE-89) ・CVSS:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Metabase に存在する SQL インジェクションの脆弱性です。 未認証のリモート攻撃者が `/api/session/reset_password` エンドポイントに細工したリクエストを送信することで、Metabase アプリケーションデータベースに対して SQL インジェクションを実行し、管理者アクセスを取得できる可能性があります。 影響を受ける Metabase 1.58 系から 1.63 系の複数バージョンについて、修正済みリリースへの更新が案内されています。 ✅ChatGPTによる脆弱性評価 ・国内影響度：中 ・悪用難易度：低 ✅CISA 評価 ・攻撃自動化：自動化は可能 ・技術的影響：完全制御 ・BOD 26-04 対処期限（露出あり）：2026年8月14日 ・BOD 26-04 対処期限（露出なし）：2026年8月25日 ✅攻撃前提条件 ・影響を受ける Metabase を使用している ・`/api/session/reset_password` エンドポイントがネットワーク経由で到達可能である ・攻撃者が対象 Metabase インスタンスへ HTTP リクエストを送信できる ・攻撃者は認証情報を必要としない ・Metabase の修正済みバージョンへ更新されていない ✅悪用時影響 ・未認証の攻撃者に SQL インジェクションを実行される可能性がある ・Metabase の管理者アクセスを取得される可能性がある ・Metabase アプリケーションデータベース内の情報へ不正アクセスされる可能性がある ・接続済みデータソースやダッシュボード情報へ不正アクセスされる可能性がある ・組織内のBIデータ、認証情報、接続設定の漏えいにつながる可能性がある ✅悪用事例等に関する公開情報 ・PoC/Exploit：公開済み ・ITW：確認済み（Metabase / Wiz） ・概要：Metabase は、Metabase Cloud に対するゼロデイ SQL インジェクションの悪用を公表 ✅関連情報 ・https://nvd.nist.gov/vuln/detail/CVE-2026-72898 ・https://github.com/metabase/metabase/security/advisories/GHSA-vwf4-m7j8-wcjf ・https://www.metabase.com/blog/security-update ・https://github.com/cisagov/vulnrichment/blob/develop/2026/72xxx/CVE-2026-72898.json ・https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-72898 ・https://www.wiz.io/blog/inside-the-metabase-sqli-exploited-in-the-wild CISA Alert ・https://www.cisa.gov/news-events/alerts/2026/08/11/cisa-adds-three-known-exploited-vulnerabilities-catalog #vulnerability

    Post summary

    CISA confirms that three CVEs are actively exploited in the wild, provides detailed technical information, and includes patch guidance and references to vendor advisories.

    010305.8K
    44.3K followersView on X
  • George V. Hulme@georgevhulme
    General

    CVE-2026-20349: Someone Is Crashing Cisco Firewalls. We Need to Talk About Why. https://eclypsium.com/blog/cve-2026-20349-someone-is-crashing-cisco-firewalls-we-need-to-talk-about-why/

    Post summary

    The text mentions CVE-2026-20349 affecting Cisco firewalls but does not provide any details on exploitation, patching, or technical specifics. It appears to be a general disclosure announcement.

    01011218
    14.4K followersView on X
  • NCIIPC India@NCIIPC
    Patch

    #Cisco Security Updates for Denial-of-Service (DoS) #vulnerability #CVE-2026-20349 in Cisco Secure Firewall ASA and FTD Software. Upgrade immediately  https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-vpn-dos-dzv4mQFF

    Post summary

    Cisco issued a patch advisory for CVE‑2026‑20349, a DoS flaw affecting ASA and FTD firewalls, and urged users to upgrade immediately.

    00030454
    8.5K followersView on X
  • Adam@seoscottsdale
    Active Exploitation

    Verified. The @CipherWardenAI 24h snapshot holds up under primary-source check. CISA added three KEVs on 11 Aug — all actively exploited: • Cisco ASA/FTD DoS (CVE-2026-20349) — unauth SSL VPN crash. Fed deadline 14 Aug. • Windows afd.sys LPE (CVE-2026-68820) — Lazarus Operation Dream Job using it since early July for SYSTEM + rootkit on defense targets. • Metabase unauth SQLi (CVE-2026-72898) — already hit Framework, Tally, n8n. Also tracking Adobe Commerce session hijacks and the new ShieldBreak Defender SYSTEM bypass. Priority is unambiguous this week: 1. Hotfix Cisco 2. Patch Windows + reboot 3. Upgrade or block Metabase /api/session/reset_password 4. Hunt ShieldBreak Full actions and sources are in the thread. Share with your SOC. What’s your biggest exposure right now — firewalls, BI tools, or Windows endpoints? #Cybersecurity #AISecurity #KEV

    Post summary

    Three CVEs—Cisco ASA DoS, Windows afd.sys LPE, and Metabase unauth SQLi—are actively exploited, with CISA KEV alerts and real‑world usage; the post urges immediate patches and blocking measures.

    11010225
    12.4K followersView on X
  • PCQuest@pcquest
    Active Exploitation

    Cisco ASA/FTD CVE‑2026‑20349 is crashing Cisco firewalls via crafted HTTP requests. Already exploited; patch fast and watch for reloads. Read More: https://www.pcquest.com/news/hackers-are-exploiting-cve-2026-20349-to-crash-cisco-firewalls-12256497 #PCQuest #Cisco #CyberSecurity https://t.co/mCfCwR9IYD

    Post summary

    CVE-2026-20349 is actively exploited against Cisco ASA/FTD firewalls, causing crashes through crafted HTTP requests; the advisory urges immediate patching and monitoring for reloads.

    0102094
    6.8K followersView on X
  • The Cyber Security Hub™@TheCyberSecHub
    Patch

    Cisco fixes vulnerability exploited to DoS its firewalls (CVE-2026-20349) https://www.helpnetsecurity.com/2026/08/13/cve-2026-20349-cisco-firewalls-dos/?utm_source=dlvr.it&utm_medium=twitter

    Post summary

    Cisco has applied a fix for CVE-2026-20349, which was previously exploited for a denial‑of‑service attack against its firewalls.

    000301.5K
    195.2K followersView on X
  • Help Net Security@helpnetsecurity
    Patch

    Cisco fixes vulnerability exploited to DoS its firewalls (CVE-2026-20349) - https://www.helpnetsecurity.com/2026/08/13/cve-2026-20349-cisco-firewalls-dos/ - @Cisco @CiscoSecure @CISACyber @CISAgov @val_brux #Exploit #Firewall #SecureAccess #Vulnerability #Cybersecurity #CybersecurityNews https://t.co/xW5DlPM7LL

    Post summary

    Cisco has released a fix for CVE‑2026‑20349, a denial‑of‑service flaw in its firewalls that was actively exploited.

    01020665
    60.2K followersView on X
CPE platform detail197 entries

197 of 197 entries

PartVendorProductVersionTarget SWTarget HW
OSciscoadaptive_security_appliance_software9.16.1--
OSciscoadaptive_security_appliance_software9.16.1.28--
OSciscoadaptive_security_appliance_software9.16.2--
OSciscoadaptive_security_appliance_software9.16.2.11--
OSciscoadaptive_security_appliance_software9.16.2.13--
OSciscoadaptive_security_appliance_software9.16.2.14--
OSciscoadaptive_security_appliance_software9.16.2.3--
OSciscoadaptive_security_appliance_software9.16.2.7--
OSciscoadaptive_security_appliance_software9.16.3--
OSciscoadaptive_security_appliance_software9.16.3.14--
OSciscoadaptive_security_appliance_software9.16.3.15--
OSciscoadaptive_security_appliance_software9.16.3.19--
OSciscoadaptive_security_appliance_software9.16.3.23--
OSciscoadaptive_security_appliance_software9.16.3.3--
OSciscoadaptive_security_appliance_software9.16.4--
OSciscoadaptive_security_appliance_software9.16.4.14--
OSciscoadaptive_security_appliance_software9.16.4.19--
OSciscoadaptive_security_appliance_software9.16.4.27--
OSciscoadaptive_security_appliance_software9.16.4.38--
OSciscoadaptive_security_appliance_software9.16.4.39--
OSciscoadaptive_security_appliance_software9.16.4.42--
OSciscoadaptive_security_appliance_software9.16.4.48--
OSciscoadaptive_security_appliance_software9.16.4.55--
OSciscoadaptive_security_appliance_software9.16.4.57--
OSciscoadaptive_security_appliance_software9.16.4.61--
OSciscoadaptive_security_appliance_software9.16.4.62--
OSciscoadaptive_security_appliance_software9.16.4.67--
OSciscoadaptive_security_appliance_software9.16.4.70--
OSciscoadaptive_security_appliance_software9.16.4.71--
OSciscoadaptive_security_appliance_software9.16.4.76--
OSciscoadaptive_security_appliance_software9.16.4.82--
OSciscoadaptive_security_appliance_software9.16.4.84--
OSciscoadaptive_security_appliance_software9.16.4.85--
OSciscoadaptive_security_appliance_software9.16.4.89--
OSciscoadaptive_security_appliance_software9.16.4.9--
OSciscoadaptive_security_appliance_software9.16.4.92--
OSciscoadaptive_security_appliance_software9.18.1--
OSciscoadaptive_security_appliance_software9.18.1.3--
OSciscoadaptive_security_appliance_software9.18.2--
OSciscoadaptive_security_appliance_software9.18.2.5--
OSciscoadaptive_security_appliance_software9.18.2.7--
OSciscoadaptive_security_appliance_software9.18.2.8--
OSciscoadaptive_security_appliance_software9.18.3--
OSciscoadaptive_security_appliance_software9.18.3.39--
OSciscoadaptive_security_appliance_software9.18.3.46--
OSciscoadaptive_security_appliance_software9.18.3.53--
OSciscoadaptive_security_appliance_software9.18.3.55--
OSciscoadaptive_security_appliance_software9.18.3.56--
OSciscoadaptive_security_appliance_software9.18.4--
OSciscoadaptive_security_appliance_software9.18.4.135--
OSciscoadaptive_security_appliance_software9.18.4.22--
OSciscoadaptive_security_appliance_software9.18.4.24--
OSciscoadaptive_security_appliance_software9.18.4.29--
OSciscoadaptive_security_appliance_software9.18.4.34--
OSciscoadaptive_security_appliance_software9.18.4.40--
OSciscoadaptive_security_appliance_software9.18.4.47--
OSciscoadaptive_security_appliance_software9.18.4.5--
OSciscoadaptive_security_appliance_software9.18.4.50--
OSciscoadaptive_security_appliance_software9.18.4.52--
OSciscoadaptive_security_appliance_software9.18.4.53--
OSciscoadaptive_security_appliance_software9.18.4.57--
OSciscoadaptive_security_appliance_software9.18.4.66--
OSciscoadaptive_security_appliance_software9.18.4.67--
OSciscoadaptive_security_appliance_software9.18.4.68--
OSciscoadaptive_security_appliance_software9.18.4.71--
OSciscoadaptive_security_appliance_software9.18.4.76--
OSciscoadaptive_security_appliance_software9.18.4.8--
OSciscoadaptive_security_appliance_software9.18.4.82--
OSciscoadaptive_security_appliance_software9.18.4.90--
OSciscoadaptive_security_appliance_software9.19.1--
OSciscoadaptive_security_appliance_software9.19.1.12--
OSciscoadaptive_security_appliance_software9.19.1.18--
OSciscoadaptive_security_appliance_software9.19.1.22--
OSciscoadaptive_security_appliance_software9.19.1.24--
OSciscoadaptive_security_appliance_software9.19.1.27--
OSciscoadaptive_security_appliance_software9.19.1.28--
OSciscoadaptive_security_appliance_software9.19.1.31--
OSciscoadaptive_security_appliance_software9.19.1.37--
OSciscoadaptive_security_appliance_software9.19.1.38--
OSciscoadaptive_security_appliance_software9.19.1.42--
OSciscoadaptive_security_appliance_software9.19.1.5--
OSciscoadaptive_security_appliance_software9.19.1.9--
OSciscoadaptive_security_appliance_software9.20.1--
OSciscoadaptive_security_appliance_software9.20.1.5--
OSciscoadaptive_security_appliance_software9.20.2--
OSciscoadaptive_security_appliance_software9.20.2.10--
OSciscoadaptive_security_appliance_software9.20.2.21--
OSciscoadaptive_security_appliance_software9.20.2.22--
OSciscoadaptive_security_appliance_software9.20.3--
OSciscoadaptive_security_appliance_software9.20.3.10--
OSciscoadaptive_security_appliance_software9.20.3.13--
OSciscoadaptive_security_appliance_software9.20.3.16--
OSciscoadaptive_security_appliance_software9.20.3.20--
OSciscoadaptive_security_appliance_software9.20.3.4--
OSciscoadaptive_security_appliance_software9.20.3.7--
OSciscoadaptive_security_appliance_software9.20.3.9--
OSciscoadaptive_security_appliance_software9.20.4--
OSciscoadaptive_security_appliance_software9.20.4.10--
OSciscoadaptive_security_appliance_software9.20.4.14--
OSciscoadaptive_security_appliance_software9.20.4.19--
OSciscoadaptive_security_appliance_software9.20.4.22--
OSciscoadaptive_security_appliance_software9.20.4.28--
OSciscoadaptive_security_appliance_software9.20.4.30--
OSciscoadaptive_security_appliance_software9.20.4.34--
OSciscoadaptive_security_appliance_software9.20.4.46--
OSciscoadaptive_security_appliance_software9.20.4.7--
OSciscoadaptive_security_appliance_software9.22.1.1--
OSciscoadaptive_security_appliance_software9.22.1.2--
OSciscoadaptive_security_appliance_software9.22.1.3--
OSciscoadaptive_security_appliance_software9.22.1.6--
OSciscoadaptive_security_appliance_software9.22.2--
OSciscoadaptive_security_appliance_software9.22.2.13--
OSciscoadaptive_security_appliance_software9.22.2.14--
OSciscoadaptive_security_appliance_software9.22.2.20--
OSciscoadaptive_security_appliance_software9.22.2.32--
OSciscoadaptive_security_appliance_software9.22.2.4--
OSciscoadaptive_security_appliance_software9.22.2.9--
OSciscoadaptive_security_appliance_software9.22.3--
OSciscoadaptive_security_appliance_software9.22.3.5--
OSciscoadaptive_security_appliance_software9.23.1--
OSciscoadaptive_security_appliance_software9.23.1.13--
OSciscoadaptive_security_appliance_software9.23.1.19--
OSciscoadaptive_security_appliance_software9.23.1.195--
OSciscoadaptive_security_appliance_software9.23.1.22--
OSciscoadaptive_security_appliance_software9.23.1.26--
OSciscoadaptive_security_appliance_software9.23.1.3--
OSciscoadaptive_security_appliance_software9.23.1.32--
OSciscoadaptive_security_appliance_software9.23.1.7--
OSciscoadaptive_security_appliance_software9.24.1--
OSciscoadaptive_security_appliance_software9.24.1.11--
OSciscoadaptive_security_appliance_software9.24.1.155--
OSciscoadaptive_security_appliance_software9.24.1.5--
OSciscoadaptive_security_appliance_software9.24.1.9--
Appciscosecure_firewall_threat_defense10.0.0--
Appciscosecure_firewall_threat_defense10.0.2--
Appciscosecure_firewall_threat_defense7.0.0--
Appciscosecure_firewall_threat_defense7.0.0.1--
Appciscosecure_firewall_threat_defense7.0.1--
Appciscosecure_firewall_threat_defense7.0.1.1--
Appciscosecure_firewall_threat_defense7.0.2--
Appciscosecure_firewall_threat_defense7.0.2.1--
Appciscosecure_firewall_threat_defense7.0.3--
Appciscosecure_firewall_threat_defense7.0.4--
Appciscosecure_firewall_threat_defense7.0.5--
Appciscosecure_firewall_threat_defense7.0.6--
Appciscosecure_firewall_threat_defense7.0.6.1--
Appciscosecure_firewall_threat_defense7.0.6.2--
Appciscosecure_firewall_threat_defense7.0.6.3--
Appciscosecure_firewall_threat_defense7.0.7--
Appciscosecure_firewall_threat_defense7.0.8--
Appciscosecure_firewall_threat_defense7.0.8.1--
Appciscosecure_firewall_threat_defense7.0.9--
Appciscosecure_firewall_threat_defense7.2.0--
Appciscosecure_firewall_threat_defense7.2.0.1--
Appciscosecure_firewall_threat_defense7.2.1--
Appciscosecure_firewall_threat_defense7.2.10--
Appciscosecure_firewall_threat_defense7.2.10.2--
Appciscosecure_firewall_threat_defense7.2.11--
Appciscosecure_firewall_threat_defense7.2.12--
Appciscosecure_firewall_threat_defense7.2.2--
Appciscosecure_firewall_threat_defense7.2.3--
Appciscosecure_firewall_threat_defense7.2.4--
Appciscosecure_firewall_threat_defense7.2.4.1--
Appciscosecure_firewall_threat_defense7.2.5--
Appciscosecure_firewall_threat_defense7.2.5.1--
Appciscosecure_firewall_threat_defense7.2.5.2--
Appciscosecure_firewall_threat_defense7.2.6--
Appciscosecure_firewall_threat_defense7.2.7--
Appciscosecure_firewall_threat_defense7.2.8--
Appciscosecure_firewall_threat_defense7.2.8.1--
Appciscosecure_firewall_threat_defense7.2.9--
Appciscosecure_firewall_threat_defense7.3.0--
Appciscosecure_firewall_threat_defense7.3.1--
Appciscosecure_firewall_threat_defense7.3.1.1--
Appciscosecure_firewall_threat_defense7.3.1.2--
Appciscosecure_firewall_threat_defense7.4.0--
Appciscosecure_firewall_threat_defense7.4.1--
Appciscosecure_firewall_threat_defense7.4.1.1--
Appciscosecure_firewall_threat_defense7.4.2--
Appciscosecure_firewall_threat_defense7.4.2.1--
Appciscosecure_firewall_threat_defense7.4.2.2--
Appciscosecure_firewall_threat_defense7.4.2.3--
Appciscosecure_firewall_threat_defense7.4.2.4--
Appciscosecure_firewall_threat_defense7.4.3--
Appciscosecure_firewall_threat_defense7.4.4--
Appciscosecure_firewall_threat_defense7.4.7--
Appciscosecure_firewall_threat_defense7.4.8--
Appciscosecure_firewall_threat_defense7.6.0--
Appciscosecure_firewall_threat_defense7.6.1--
Appciscosecure_firewall_threat_defense7.6.2--
Appciscosecure_firewall_threat_defense7.6.2.1--
Appciscosecure_firewall_threat_defense7.6.4--
Appciscosecure_firewall_threat_defense7.7.0--
Appciscosecure_firewall_threat_defense7.7.10--
Appciscosecure_firewall_threat_defense7.7.10.1--
Appciscosecure_firewall_threat_defense7.7.11--
Appciscosecure_firewall_threat_defense7.7.13--

Explore more

Back to dashboardcisco CVEsadaptive_security_appliance_software vulnerabilities