CS
Product
Cisco Secure Firewall Adaptive Security Appliance (ASA) Software
by Cisco · last CVE Oct 28, 2026
On CISA KEVExploited in the wild
47
CVEs
3
On KEV
9.9
Max CVSS
1
New 30D
Severity mix
Critical 5High 22Medium 20Low 0
Watch

Add Cisco Secure Firewall Adaptive Security Appliance (ASA) Software to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-20333
In wildKEV
9.9
71%
Sep 25
Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability
Affected: 9.8.1; 9.8.1.5; 9.8.1.7; 9.8.2; 9.8.2.8; 9.8.2.14; +34 more
CVE-2026-20349
In wildKEV
8.6
1%
Aug 11
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service Vulnerability
Affected: 9.16.1; 9.16.1.28; 9.16.2; 9.16.2.3; 9.16.2.7; 9.16.2.11; +34 more
CVE-2025-20362
In wildKEV
8.6
87%
Sep 25
Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability
Affected: 9.8.1; 9.8.1.5; 9.8.1.7; 9.8.2; 9.8.2.8; 9.8.2.14; +34 more
CVE-2026-20332
9.9
0%
Sep 16
Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Improper Access Control Vulnerabilities
Affected: 9.16.1; 9.16.1.28; 9.16.2; 9.16.2.3; 9.16.2.7; 9.16.2.11; +34 more
CVE-2026-20330
9.9
0%
Sep 16
Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Improper Neutralization Vulnerabilities
Affected: 9.16.1; 9.16.1.28; 9.16.2; 9.16.2.3; 9.16.2.7; 9.16.2.11; +34 more
CVE-2026-20329
9.9
0%
Sep 16
Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Exceptional Conditions Handling Vulnerabilities
Affected: 9.16.1; 9.16.1.28; 9.16.2; 9.16.2.3; 9.16.2.7; 9.16.2.11; +34 more
CVE-2026-20331
9.6
0%
Sep 16
Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Protection Mechanism Failure Vulnerabilities
Affected: 9.16.1; 9.16.1.28; 9.16.2; 9.16.2.3; 9.16.2.7; 9.16.2.11; +34 more
CVE-2026-20333
8.8
0%
Sep 16
Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Incorrect Comparison Vulnerabilities
Affected: 9.16.1; 9.16.1.28; 9.16.2; 9.16.2.3; 9.16.2.7; 9.16.2.11; +34 more
CVE-2026-20336
8.8
0%
Sep 16
Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Resource Lifetime Management Vulnerabilities
Affected: 9.16.1; 9.16.1.28; 9.16.2; 9.16.2.3; 9.16.2.7; 9.16.2.11; +34 more
CVE-2026-76418
New
8.6–Oct 28
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service Vulnerability
Affected: 9.16.1; 9.16.1.28; 9.16.2; 9.16.2.3; 9.16.2.7; 9.16.2.11; +34 more
CVE-2026-20154
8.6
1%
Sep 16
Cisco Secure Firewall Adaptive Security Appliance Software and Secure Firewall Threat Defense Software Logging Denial of Service
Affected: 9.16.1; 9.16.1.28; 9.16.2; 9.16.2.3; 9.16.2.7; 9.16.2.11; +34 more
CVE-2026-20249
8.6
0%
Sep 16
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software IKEv2 Certificate Authentication Denial of Service Vulnerability
Affected: 9.16.1; 9.16.1.28; 9.16.2; 9.16.2.3; 9.16.2.7; 9.16.2.11; +34 more
CVE-2026-20250
8.6
1%
Sep 16
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software for Firepower 3100 and 4200 Series DTLS Denial of Service Vulnerability
Affected: 9.23.1; 9.22.1.1; 9.22.1.3; 9.22.1.6; 9.22.2; 9.23.1.3; +11 more
CVE-2026-20012
8.6
0%
Mar 25
A vulnerability in the Internet Key Exchange version 2 (IKEv2) feature of Cisco IOS Software, Cisco IOS XE Software, Cisco Secure Firewall Adaptive Security Appliance (ASA)…
Affected: 9.8.1; 9.8.1.5; 9.8.1.7; 9.8.2; 9.8.2.8; 9.8.2.14; +34 more
CVE-2026-20082
8.6
0%
Mar 4
A vulnerability in the handling of the embryonic connection limits in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote…
Affected: 9.20.4.14
CVE-2026-20103
8.6
0%
Mar 4
A vulnerability in the Remote Access SSL VPN functionality of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD) Software…
Affected: 9.12.4.48; 9.12.4.50; 9.12.4.52; 9.12.4.54; 9.12.4.55; 9.12.4.56; +34 more
CVE-2026-20101
8.6
0%
Mar 4
A vulnerability in the SAML 2.0 single sign-on (SSO) feature of Cisco Secure Firewall ASA Software and Secure FTD Software could allow an unauthenticated, remote attacker to cause…
Affected: 9.12.1; 9.12.1.2; 9.12.1.3; 9.12.2; 9.12.2.4; 9.12.2.5; +34 more
CVE-2026-20039
8.6
0%
Mar 4
Cisco Adaptive Security Appliance and Firepower Threat Defense Software SSL VPN Authentication Denial of Service Vulnerability
Affected: 9.12.3; 9.12.1; 9.12.2; 9.12.4; 9.12.3.2; 9.12.3.7; +34 more
CVE-2024-20260
8.6
1%
Oct 23
Cisco Adaptive Security Virtual Appliance and Secure Firewall Threat Defense Virtual SSL VPN Denial of Service Vulnerability
Affected: 9.16.1; 9.16.1.28; 9.16.2; 9.16.2.3; 9.16.2.7; 9.16.2.11; +34 more
CVE-2026-20334
8.4
0%
Sep 16
Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Coding Standards Vulnerabilities
Affected: 9.16.1; 9.16.1.28; 9.16.2; 9.16.2.3; 9.16.2.7; 9.16.2.11; +34 more
CVE-2026-20335
8.1
0%
Sep 16
Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Incorrect Calculation Vulnerabilities
Affected: 9.16.1; 9.16.1.28; 9.16.2; 9.16.2.3; 9.16.2.7; 9.16.2.11; +34 more
CVE-2026-20049
7.7
0%
Mar 4
A vulnerability in the processing of Galois/Counter Mode (GCM)-encrypted Internet Key Exchange version 2 (IKEv2) IPsec traffic of Cisco Secure Firewall Adaptive Security Appliance…
Affected: 9.12.4.7; 9.12.4.10; 9.12.4.13; 9.12.4.8; 9.12.4.18; 9.12.4.24; +34 more
CVE-2026-20014
7.7
0%
Mar 4
A vulnerability in the IKEv2 feature of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an authenticated, remote attacker with valid VPN user…
Affected: 9.18.1; 9.18.1.3; 9.18.2; 9.18.2.5; 9.18.2.7; 9.18.2.8; +34 more
CVE-2026-20105
7.7
0%
Mar 4
A vulnerability in the Remote Access SSL VPN functionality of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD) Software…
Affected: 9.12.1; 9.12.1.2; 9.12.1.3; 9.12.2; 9.12.2.4; 9.12.2.5; +34 more
CVE-2026-20100
7.7
0%
Mar 4
A vulnerability in the LUA interperter of the Remote Access SSL VPN feature of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense…
Affected: 9.12.1; 9.12.1.2; 9.12.1.3; 9.12.2; 9.12.2.4; 9.12.2.5; +34 more
CVE-2026-20222
7.4
0%
Sep 16
Cisco Secure Adaptive Security Appliance Software and Secure Firewall Threat Defense Software EIGRP Denial of Service Vulnerability
Affected: 9.19.1; 9.19.1.5; 9.19.1.9; 9.19.1.12; 9.19.1.18; 9.20.1; +34 more
CVE-2026-20062
7.2
0%
Mar 4
A vulnerability in the CLI of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software in multiple context mode could allow an authenticated, local attacker with…
Affected: 9.17.1; 9.17.1.7; 9.17.1.9; 9.17.1.10; 9.17.1.11; 9.17.1.13; +34 more
CVE-2026-20248
6.8
0%
Sep 16
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software TCP DNS Denial of Service Vulnerability
Affected: 9.16.1; 9.16.1.28; 9.16.2; 9.16.2.3; 9.16.2.7; 9.16.2.11; +34 more
CVE-2026-20025
6.8
0%
Mar 4
A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an authenticated, adjacent attacker to cause an affected…
Affected: 9.12.1; 9.12.1.2; 9.12.1.3; 9.12.2; 9.12.2.4; 9.12.2.5; +34 more
CVE-2026-20099
6.7
1%
Feb 25
Cisco UCS Manager and FXOS Software Command Injection Vulnerability
Affected: 9.12.2; 9.12.1; 9.12.3; 9.12.4; 9.12.3.2; 9.12.3.12; +34 more
CVE-2026-20023
6.5
0%
Mar 4
A vulnerability in the OSPF protocol of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an…
Affected: 9.12.1; 9.12.1.2; 9.12.1.3; 9.12.2; 9.12.2.4; 9.12.2.5; +34 more
CVE-2026-20022
6.5
0%
Mar 4
A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, adjacent attacker to cause an affected…
Affected: 9.12.1; 9.12.1.2; 9.12.1.3; 9.12.2; 9.12.2.4; 9.12.2.5; +34 more
CVE-2026-20102
6.1
0%
Mar 4
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software SAML Reflected Cross-Site Scripting Vulnerability
Affected: 9.16.1; 9.16.1.28; 9.16.2; 9.16.2.3; 9.16.2.7; 9.17.1; +22 more
CVE-2026-20070
6.1
0%
Mar 4
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software VPN Web Services Cross-Site Scripting Vulnerability
Affected: 9.12.3; 9.12.1; 9.12.2; 9.12.4; 9.12.3.2; 9.12.3.7; +34 more
CVE-2026-20008
6.0
0%
Mar 4
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Lua Code Injection Vulnerability
Affected: 9.12.3; 9.12.1; 9.12.2; 9.12.4; 9.12.3.2; 9.12.3.7; +34 more
CVE-2026-20120
5.8
1%
Sep 16
Cisco FTD ACL bypass vulnerability
Affected: 9.23.1; 9.22.1.1; 9.22.1.3; 9.22.1.2; 9.22.1.6; 9.22.2; +10 more
CVE-2026-20073
5.8
0%
Mar 4
Cisco Secure Firewall Adaptive Security Appliance Software and Cisco Secure Firewall Threat Defense Software Access Control List Bypass Vulnerability
Affected: 9.12.3; 9.12.1; 9.12.2; 9.12.4; 9.12.3.2; 9.12.3.7; +34 more
CVE-2026-20015
5.8
0%
Mar 4
A vulnerability in the IKEv2 feature of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, remote attacker to cause a DoS condition…
Affected: 9.18.1; 9.18.1.3; 9.18.2; 9.18.2.5; 9.18.2.7; 9.18.2.8; +34 more
CVE-2026-20013
5.8
0%
Mar 4
A vulnerability in the IKEv2 feature of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, remote attacker to cause a DoS condition…
Affected: 9.12.1; 9.12.1.2; 9.12.1.3; 9.12.2; 9.12.2.4; 9.12.2.5; +34 more
CVE-2026-20024
5.7
0%
Mar 4
A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an authenticated, adjacent attacker to cause an affected…
Affected: 9.12.1; 9.12.1.2; 9.12.1.3; 9.12.2; 9.12.2.4; 9.12.2.5; +34 more
CVE-2026-20020
5.7
0%
Mar 4
A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, adjacent attacker to cause an affected…
Affected: 9.12.1; 9.12.1.2; 9.12.1.3; 9.12.2; 9.12.2.4; 9.12.2.5; +34 more
CVE-2026-20121
5.3
1%
Sep 16
CIsco FTD Bypass Access List
Affected: 9.23.1; 9.22.1.1; 9.22.1.3; 9.22.1.2; 9.22.1.6; 9.22.2; +10 more
CVE-2026-20106
5.3
0%
Mar 4
A vulnerability in the Remote Access SSL VPN, HTTP management and MUS functionality, of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat…
Affected: 9.12.1; 9.12.1.2; 9.12.1.3; 9.12.2; 9.12.2.4; 9.12.2.5; +34 more
CVE-2026-20009
5.3
0%
Mar 4
Cisco Secure Firewall Adaptive Security Appliance SSH Partial Private Key Authentication Bypass Vulnerability
Affected: 9.17.1; 9.17.1.7; 9.17.1.9; 9.17.1.10; 9.18.1; 9.18.1.3; +34 more
CVE-2026-20091
4.8
0%
Feb 25
Cisco UCS Manager and FXOS Software Stored Cross-Site Scripting Vulnerability
Affected: 9.12.2; 9.12.1; 9.12.3; 9.12.4; 9.12.3.2; 9.12.3.12; +34 more
CVE-2026-20021
4.3
0%
Mar 4
A vulnerability in the OSPF protocol of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an…
Affected: 9.12.1; 9.12.1.2; 9.12.1.3; 9.12.2; 9.12.2.4; 9.12.2.5; +34 more
CVE-2026-20069
4.3
0%
Mar 4
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software VPN Web Services Client-Side Request Smuggling Vulnerability
Affected: 9.12.3; 9.12.1; 9.12.2; 9.12.4; 9.12.3.2; 9.12.3.7; +34 more
Showing 47