HIGHVulnerability
Verified
Global

CISA KEV: Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) — Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability

·Source: CISA KEV

Updated:

Executive Summary

Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) contain a heap inspection vulnerability that could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition.

Analysis

Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) contain a heap inspection vulnerability that could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition. Added to CISA Known Exploited Vulnerabilities catalog on 2026-08-11. Remediation due: 2026-08-14.

Indicators of Compromise (1)

CVE (1)
CVE-2026-20349
NVDMITRE CVE
Source Attribution

Originally published by CISA KEV on Aug 11, 2026. Verified by: CISA.

Related Threats

HIGHVulnerabilityNEW

CISA KEV: Ray-Project Ray — Ray-Project Ray Code Injection Vulnerability

Ray-Project Ray contains a code injection vulnerability that could allow remote code execution. Developers using Ray as a development tool may be exposed to this vulnerability exploitable through Firefox and Safari.

CVE-2025-62593Ray-Project Ray
CISA KEV
MEDIUMVulnerability

Hacker claims 3.6 million Azure account records stolen from major companies

A threat actor is selling employee databases allegedly stolen from the Microsoft Azure infrastructure of multiple Fortune 500 companies after gaining access using compromised credentials. [...]

BleepingComputer
CRITICALVulnerability

NVD CRITICAL: CVE-2026-66792 — A flaw was found in the multicloud-operators-subscription component. This vulner...

A flaw was found in the multicloud-operators-subscription component. This vulnerability allows a user on a managed cluster to escalate their privileges by creating a Subscription with specific, crafted annotations. Successful exploitation grants the attacker the ability to deploy resources into any namespace with the elevated permissions of the controller's Service Account, potentially leading to

CVE-2026-66792
NIST NVD