CS
Product
Cisco Secure Firewall Adaptive Security Appliance (ASA) Software
On CISA KEVExploited in the wild
47
CVEs
3
On KEV
9.9
Max CVSS
1
New 30D
Severity mix
Critical 5High 22Medium 20Low 0
Watch
Add Cisco Secure Firewall Adaptive Security Appliance (ASA) Software to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-20333 In wildKEV | 9.9 | Sep 25 | Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability Affected: 9.8.1; 9.8.1.5; 9.8.1.7; 9.8.2; 9.8.2.8; 9.8.2.14; +34 more |
| CVE-2026-20349 In wildKEV | 8.6 | Aug 11 | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service Vulnerability Affected: 9.16.1; 9.16.1.28; 9.16.2; 9.16.2.3; 9.16.2.7; 9.16.2.11; +34 more |
| CVE-2025-20362 In wildKEV | 8.6 | Sep 25 | Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability Affected: 9.8.1; 9.8.1.5; 9.8.1.7; 9.8.2; 9.8.2.8; 9.8.2.14; +34 more |
| CVE-2026-20332 | 9.9 | Sep 16 | Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Improper Access Control Vulnerabilities Affected: 9.16.1; 9.16.1.28; 9.16.2; 9.16.2.3; 9.16.2.7; 9.16.2.11; +34 more |
| CVE-2026-20330 | 9.9 | Sep 16 | Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Improper Neutralization Vulnerabilities Affected: 9.16.1; 9.16.1.28; 9.16.2; 9.16.2.3; 9.16.2.7; 9.16.2.11; +34 more |
| CVE-2026-20329 | 9.9 | Sep 16 | Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Exceptional Conditions Handling Vulnerabilities Affected: 9.16.1; 9.16.1.28; 9.16.2; 9.16.2.3; 9.16.2.7; 9.16.2.11; +34 more |
| CVE-2026-20331 | 9.6 | Sep 16 | Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Protection Mechanism Failure Vulnerabilities Affected: 9.16.1; 9.16.1.28; 9.16.2; 9.16.2.3; 9.16.2.7; 9.16.2.11; +34 more |
| CVE-2026-20333 | 8.8 | Sep 16 | Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Incorrect Comparison Vulnerabilities Affected: 9.16.1; 9.16.1.28; 9.16.2; 9.16.2.3; 9.16.2.7; 9.16.2.11; +34 more |
| CVE-2026-20336 | 8.8 | Sep 16 | Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Resource Lifetime Management Vulnerabilities Affected: 9.16.1; 9.16.1.28; 9.16.2; 9.16.2.3; 9.16.2.7; 9.16.2.11; +34 more |
| CVE-2026-76418 New | 8.6 | Oct 28 | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service Vulnerability Affected: 9.16.1; 9.16.1.28; 9.16.2; 9.16.2.3; 9.16.2.7; 9.16.2.11; +34 more |
| CVE-2026-20154 | 8.6 | Sep 16 | Cisco Secure Firewall Adaptive Security Appliance Software and Secure Firewall Threat Defense Software Logging Denial of Service Affected: 9.16.1; 9.16.1.28; 9.16.2; 9.16.2.3; 9.16.2.7; 9.16.2.11; +34 more |
| CVE-2026-20249 | 8.6 | Sep 16 | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software IKEv2 Certificate Authentication Denial of Service Vulnerability Affected: 9.16.1; 9.16.1.28; 9.16.2; 9.16.2.3; 9.16.2.7; 9.16.2.11; +34 more |
| CVE-2026-20250 | 8.6 | Sep 16 | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software for Firepower 3100 and 4200 Series DTLS Denial of Service Vulnerability Affected: 9.23.1; 9.22.1.1; 9.22.1.3; 9.22.1.6; 9.22.2; 9.23.1.3; +11 more |
| CVE-2026-20012 | 8.6 | Mar 25 | A vulnerability in the Internet Key Exchange version 2 (IKEv2) feature of Cisco IOS Software, Cisco IOS XE Software, Cisco Secure Firewall Adaptive Security Appliance (ASA)… Affected: 9.8.1; 9.8.1.5; 9.8.1.7; 9.8.2; 9.8.2.8; 9.8.2.14; +34 more |
| CVE-2026-20082 | 8.6 | Mar 4 | A vulnerability in the handling of the embryonic connection limits in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote… Affected: 9.20.4.14 |
| CVE-2026-20103 | 8.6 | Mar 4 | A vulnerability in the Remote Access SSL VPN functionality of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD) Software… Affected: 9.12.4.48; 9.12.4.50; 9.12.4.52; 9.12.4.54; 9.12.4.55; 9.12.4.56; +34 more |
| CVE-2026-20101 | 8.6 | Mar 4 | A vulnerability in the SAML 2.0 single sign-on (SSO) feature of Cisco Secure Firewall ASA Software and Secure FTD Software could allow an unauthenticated, remote attacker to cause… Affected: 9.12.1; 9.12.1.2; 9.12.1.3; 9.12.2; 9.12.2.4; 9.12.2.5; +34 more |
| CVE-2026-20039 | 8.6 | Mar 4 | Cisco Adaptive Security Appliance and Firepower Threat Defense Software SSL VPN Authentication Denial of Service Vulnerability Affected: 9.12.3; 9.12.1; 9.12.2; 9.12.4; 9.12.3.2; 9.12.3.7; +34 more |
| CVE-2024-20260 | 8.6 | Oct 23 | Cisco Adaptive Security Virtual Appliance and Secure Firewall Threat Defense Virtual SSL VPN Denial of Service Vulnerability Affected: 9.16.1; 9.16.1.28; 9.16.2; 9.16.2.3; 9.16.2.7; 9.16.2.11; +34 more |
| CVE-2026-20334 | 8.4 | Sep 16 | Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Coding Standards Vulnerabilities Affected: 9.16.1; 9.16.1.28; 9.16.2; 9.16.2.3; 9.16.2.7; 9.16.2.11; +34 more |
| CVE-2026-20335 | 8.1 | Sep 16 | Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Incorrect Calculation Vulnerabilities Affected: 9.16.1; 9.16.1.28; 9.16.2; 9.16.2.3; 9.16.2.7; 9.16.2.11; +34 more |
| CVE-2026-20049 | 7.7 | Mar 4 | A vulnerability in the processing of Galois/Counter Mode (GCM)-encrypted Internet Key Exchange version 2 (IKEv2) IPsec traffic of Cisco Secure Firewall Adaptive Security Appliance… Affected: 9.12.4.7; 9.12.4.10; 9.12.4.13; 9.12.4.8; 9.12.4.18; 9.12.4.24; +34 more |
| CVE-2026-20014 | 7.7 | Mar 4 | A vulnerability in the IKEv2 feature of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an authenticated, remote attacker with valid VPN user… Affected: 9.18.1; 9.18.1.3; 9.18.2; 9.18.2.5; 9.18.2.7; 9.18.2.8; +34 more |
| CVE-2026-20105 | 7.7 | Mar 4 | A vulnerability in the Remote Access SSL VPN functionality of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD) Software… Affected: 9.12.1; 9.12.1.2; 9.12.1.3; 9.12.2; 9.12.2.4; 9.12.2.5; +34 more |
| CVE-2026-20100 | 7.7 | Mar 4 | A vulnerability in the LUA interperter of the Remote Access SSL VPN feature of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense… Affected: 9.12.1; 9.12.1.2; 9.12.1.3; 9.12.2; 9.12.2.4; 9.12.2.5; +34 more |
| CVE-2026-20222 | 7.4 | Sep 16 | Cisco Secure Adaptive Security Appliance Software and Secure Firewall Threat Defense Software EIGRP Denial of Service Vulnerability Affected: 9.19.1; 9.19.1.5; 9.19.1.9; 9.19.1.12; 9.19.1.18; 9.20.1; +34 more |
| CVE-2026-20062 | 7.2 | Mar 4 | A vulnerability in the CLI of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software in multiple context mode could allow an authenticated, local attacker with… Affected: 9.17.1; 9.17.1.7; 9.17.1.9; 9.17.1.10; 9.17.1.11; 9.17.1.13; +34 more |
| CVE-2026-20248 | 6.8 | Sep 16 | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software TCP DNS Denial of Service Vulnerability Affected: 9.16.1; 9.16.1.28; 9.16.2; 9.16.2.3; 9.16.2.7; 9.16.2.11; +34 more |
| CVE-2026-20025 | 6.8 | Mar 4 | A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an authenticated, adjacent attacker to cause an affected… Affected: 9.12.1; 9.12.1.2; 9.12.1.3; 9.12.2; 9.12.2.4; 9.12.2.5; +34 more |
| CVE-2026-20099 | 6.7 | Feb 25 | Cisco UCS Manager and FXOS Software Command Injection Vulnerability Affected: 9.12.2; 9.12.1; 9.12.3; 9.12.4; 9.12.3.2; 9.12.3.12; +34 more |
| CVE-2026-20023 | 6.5 | Mar 4 | A vulnerability in the OSPF protocol of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an… Affected: 9.12.1; 9.12.1.2; 9.12.1.3; 9.12.2; 9.12.2.4; 9.12.2.5; +34 more |
| CVE-2026-20022 | 6.5 | Mar 4 | A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, adjacent attacker to cause an affected… Affected: 9.12.1; 9.12.1.2; 9.12.1.3; 9.12.2; 9.12.2.4; 9.12.2.5; +34 more |
| CVE-2026-20102 | 6.1 | Mar 4 | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software SAML Reflected Cross-Site Scripting Vulnerability Affected: 9.16.1; 9.16.1.28; 9.16.2; 9.16.2.3; 9.16.2.7; 9.17.1; +22 more |
| CVE-2026-20070 | 6.1 | Mar 4 | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software VPN Web Services Cross-Site Scripting Vulnerability Affected: 9.12.3; 9.12.1; 9.12.2; 9.12.4; 9.12.3.2; 9.12.3.7; +34 more |
| CVE-2026-20008 | 6.0 | Mar 4 | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Lua Code Injection Vulnerability Affected: 9.12.3; 9.12.1; 9.12.2; 9.12.4; 9.12.3.2; 9.12.3.7; +34 more |
| CVE-2026-20120 | 5.8 | Sep 16 | Cisco FTD ACL bypass vulnerability Affected: 9.23.1; 9.22.1.1; 9.22.1.3; 9.22.1.2; 9.22.1.6; 9.22.2; +10 more |
| CVE-2026-20073 | 5.8 | Mar 4 | Cisco Secure Firewall Adaptive Security Appliance Software and Cisco Secure Firewall Threat Defense Software Access Control List Bypass Vulnerability Affected: 9.12.3; 9.12.1; 9.12.2; 9.12.4; 9.12.3.2; 9.12.3.7; +34 more |
| CVE-2026-20015 | 5.8 | Mar 4 | A vulnerability in the IKEv2 feature of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, remote attacker to cause a DoS condition… Affected: 9.18.1; 9.18.1.3; 9.18.2; 9.18.2.5; 9.18.2.7; 9.18.2.8; +34 more |
| CVE-2026-20013 | 5.8 | Mar 4 | A vulnerability in the IKEv2 feature of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, remote attacker to cause a DoS condition… Affected: 9.12.1; 9.12.1.2; 9.12.1.3; 9.12.2; 9.12.2.4; 9.12.2.5; +34 more |
| CVE-2026-20024 | 5.7 | Mar 4 | A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an authenticated, adjacent attacker to cause an affected… Affected: 9.12.1; 9.12.1.2; 9.12.1.3; 9.12.2; 9.12.2.4; 9.12.2.5; +34 more |
| CVE-2026-20020 | 5.7 | Mar 4 | A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, adjacent attacker to cause an affected… Affected: 9.12.1; 9.12.1.2; 9.12.1.3; 9.12.2; 9.12.2.4; 9.12.2.5; +34 more |
| CVE-2026-20121 | 5.3 | Sep 16 | CIsco FTD Bypass Access List Affected: 9.23.1; 9.22.1.1; 9.22.1.3; 9.22.1.2; 9.22.1.6; 9.22.2; +10 more |
| CVE-2026-20106 | 5.3 | Mar 4 | A vulnerability in the Remote Access SSL VPN, HTTP management and MUS functionality, of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat… Affected: 9.12.1; 9.12.1.2; 9.12.1.3; 9.12.2; 9.12.2.4; 9.12.2.5; +34 more |
| CVE-2026-20009 | 5.3 | Mar 4 | Cisco Secure Firewall Adaptive Security Appliance SSH Partial Private Key Authentication Bypass Vulnerability Affected: 9.17.1; 9.17.1.7; 9.17.1.9; 9.17.1.10; 9.18.1; 9.18.1.3; +34 more |
| CVE-2026-20091 | 4.8 | Feb 25 | Cisco UCS Manager and FXOS Software Stored Cross-Site Scripting Vulnerability Affected: 9.12.2; 9.12.1; 9.12.3; 9.12.4; 9.12.3.2; 9.12.3.12; +34 more |
| CVE-2026-20021 | 4.3 | Mar 4 | A vulnerability in the OSPF protocol of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an… Affected: 9.12.1; 9.12.1.2; 9.12.1.3; 9.12.2; 9.12.2.4; 9.12.2.5; +34 more |
| CVE-2026-20069 | 4.3 | Mar 4 | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software VPN Web Services Client-Side Request Smuggling Vulnerability Affected: 9.12.3; 9.12.1; 9.12.2; 9.12.4; 9.12.3.2; 9.12.3.7; +34 more |
Showing 47
