CS
Product
Cisco Secure Firewall Adaptive Security Appliance (ASA) Software
On CISA KEVExploited in the wild
48
CVEs
4
On KEV
9.9
Max CVSS
1
New 30D
Severity mix
Critical 5High 22Medium 21Low 0
Watch
Add Cisco Secure Firewall Adaptive Security Appliance (ASA) Software to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-20248 | 6.8 | Sep 16 | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software TCP DNS Denial of Service Vulnerability Affected: 9.16.1; 9.16.1.28; 9.16.2; 9.16.2.3; 9.16.2.7; 9.16.2.11; +34 more |
| CVE-2026-20025 | 6.8 | Mar 4 | A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an authenticated, adjacent attacker to cause an affected… Affected: 9.12.1; 9.12.1.2; 9.12.1.3; 9.12.2; 9.12.2.4; 9.12.2.5; +34 more |
| CVE-2026-20099 | 6.7 | Feb 25 | Cisco UCS Manager and FXOS Software Command Injection Vulnerability Affected: 9.12.2; 9.12.1; 9.12.3; 9.12.4; 9.12.3.2; 9.12.3.12; +34 more |
| CVE-2024-20358 | 6.7 | Apr 24 | A vulnerability in the Cisco Adaptive Security Appliance (ASA) restore functionality that is available in Cisco ASA Software and Cisco Firepower Threat Defense (FTD) Software… Affected: 9.8.1; 9.8.1.5; 9.8.1.7; 9.8.2; 9.8.2.8; 9.8.2.14; +34 more |
| CVE-2026-20023 | 6.5 | Mar 4 | A vulnerability in the OSPF protocol of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an… Affected: 9.12.1; 9.12.1.2; 9.12.1.3; 9.12.2; 9.12.2.4; 9.12.2.5; +34 more |
| CVE-2026-20022 | 6.5 | Mar 4 | A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, adjacent attacker to cause an affected… Affected: 9.12.1; 9.12.1.2; 9.12.1.3; 9.12.2; 9.12.2.4; 9.12.2.5; +34 more |
| CVE-2026-20102 | 6.1 | Mar 4 | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software SAML Reflected Cross-Site Scripting Vulnerability Affected: 9.16.1; 9.16.1.28; 9.16.2; 9.16.2.3; 9.16.2.7; 9.17.1; +22 more |
| CVE-2026-20070 | 6.1 | Mar 4 | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software VPN Web Services Cross-Site Scripting Vulnerability Affected: 9.12.3; 9.12.1; 9.12.2; 9.12.4; 9.12.3.2; 9.12.3.7; +34 more |
| CVE-2026-20008 | 6.0 | Mar 4 | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Lua Code Injection Vulnerability Affected: 9.12.3; 9.12.1; 9.12.2; 9.12.4; 9.12.3.2; 9.12.3.7; +34 more |
| CVE-2026-20120 | 5.8 | Sep 16 | Cisco FTD ACL bypass vulnerability Affected: 9.23.1; 9.22.1.1; 9.22.1.3; 9.22.1.2; 9.22.1.6; 9.22.2; +10 more |
| CVE-2026-20073 | 5.8 | Mar 4 | Cisco Secure Firewall Adaptive Security Appliance Software and Cisco Secure Firewall Threat Defense Software Access Control List Bypass Vulnerability Affected: 9.12.3; 9.12.1; 9.12.2; 9.12.4; 9.12.3.2; 9.12.3.7; +34 more |
| CVE-2026-20015 | 5.8 | Mar 4 | A vulnerability in the IKEv2 feature of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, remote attacker to cause a DoS condition… Affected: 9.18.1; 9.18.1.3; 9.18.2; 9.18.2.5; 9.18.2.7; 9.18.2.8; +34 more |
| CVE-2026-20013 | 5.8 | Mar 4 | A vulnerability in the IKEv2 feature of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, remote attacker to cause a DoS condition… Affected: 9.12.1; 9.12.1.2; 9.12.1.3; 9.12.2; 9.12.2.4; 9.12.2.5; +34 more |
| CVE-2026-20024 | 5.7 | Mar 4 | A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an authenticated, adjacent attacker to cause an affected… Affected: 9.12.1; 9.12.1.2; 9.12.1.3; 9.12.2; 9.12.2.4; 9.12.2.5; +34 more |
| CVE-2026-20020 | 5.7 | Mar 4 | A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, adjacent attacker to cause an affected… Affected: 9.12.1; 9.12.1.2; 9.12.1.3; 9.12.2; 9.12.2.4; 9.12.2.5; +34 more |
| CVE-2026-20121 | 5.3 | Sep 16 | CIsco FTD Bypass Access List Affected: 9.23.1; 9.22.1.1; 9.22.1.3; 9.22.1.2; 9.22.1.6; 9.22.2; +10 more |
| CVE-2026-20106 | 5.3 | Mar 4 | A vulnerability in the Remote Access SSL VPN, HTTP management and MUS functionality, of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat… Affected: 9.12.1; 9.12.1.2; 9.12.1.3; 9.12.2; 9.12.2.4; 9.12.2.5; +34 more |
| CVE-2026-20009 | 5.3 | Mar 4 | Cisco Secure Firewall Adaptive Security Appliance SSH Partial Private Key Authentication Bypass Vulnerability Affected: 9.17.1; 9.17.1.7; 9.17.1.9; 9.17.1.10; 9.18.1; 9.18.1.3; +34 more |
| CVE-2026-20091 | 4.8 | Feb 25 | Cisco UCS Manager and FXOS Software Stored Cross-Site Scripting Vulnerability Affected: 9.12.2; 9.12.1; 9.12.3; 9.12.4; 9.12.3.2; 9.12.3.12; +34 more |
| CVE-2026-20021 | 4.3 | Mar 4 | A vulnerability in the OSPF protocol of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an… Affected: 9.12.1; 9.12.1.2; 9.12.1.3; 9.12.2; 9.12.2.4; 9.12.2.5; +34 more |
| CVE-2026-20069 | 4.3 | Mar 4 | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software VPN Web Services Client-Side Request Smuggling Vulnerability Affected: 9.12.3; 9.12.1; 9.12.2; 9.12.4; 9.12.3.2; 9.12.3.7; +34 more |
Showing 21