CVE-2026-20349
CVE-2026-20349: 1 tracked advisory record across Cisco. CISA KEV listed; exploitation observed. Compare vendor sources and published fix guidance.
Compare the source-linked records below. Ratings and product/version details belong to each advisory; they are not a single CVE-wide score or proof that every listed product is affected. How VulniPulse collects and checks evidence.
Vendor advisory comparison
Cisco
1 advisory- Advisory severityHigh8.6
High [CVE-2026-20349] Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service Vulnerability
cisco-sa-asaftd-vpn-dos-dzv4mQFFSource published Source updated
A vulnerability in the Remote Access SSL VPN service for Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due to insufficient error checking when processing HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to the Remote Access SSL VPN service on an affected device. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is part of a group of advisories. For a complete list of the advisories and links to them, see Cisco Advance…
- Affected products in this advisory
- Secure Firewall Adaptive Security Appliance (ASA) Software
- Firepower 2100 Series
- Firepower 1000 Series
- ASA 5500-X Series Firewalls
4 more entries in the full advisory.
- Source-reported affected versions
- Scope: This vulnerability affects Cisco devices if they are running a vulnerable release of Cisco Secure Firewall ASA Software or Cisco Secure FTD Software and have one or more of the vulnerable configurations listed in the following table.
- Release 9.16 and earlier (first fixed: 9.16.4.103)
- Release 9.18 (first fixed: 9.18.4.94)
- Release 9.20 (first fixed: 9.20.4.49)
10 more entries in the full advisory.
- Source-reported fixed versions
- 9.16.4.103
- 9.18.4.94
- 9.20.4.49
- 9.22.3.26
9 more entries in the full advisory.
- Mitigation guidance
- Upgrade to the first fixed release for your train per the Fixed Releases table in this advisory.
- Release 9.16 and earlier: upgrade to 9.16.4.103.
- Release 9.18: upgrade to 9.18.4.94.
- Release 9.20: upgrade to 9.20.4.49.
5 more entries in the full advisory.
- Workarounds
- There are no workarounds that address this vulnerability.
Android app · Google Play
Monitor future Cisco CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.