Cisco Secure Firewall ASA & FTD - Authentication Bypass

A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to access restricted URL endpoints that are related to remote access VPN that should...

CVE-2026-20131-Post-Incident-Written-Report

CVE-2026-20131-Post-Incident-Written-Report This post-incident report analyzes the exploitation of CVE-2026-20131, a critical zero-day unauthenticated Remote Code Execution RCE vulnerability in Cisco Secure Firewall Management Center FMC. The document covers the initial intrusion vector via Java...

Cisco Secure Firewall ASA 9.16 FTD Check

Nuclei templates perform unauthenticated version-banner checks for potentially affected Cisco Secure Firewall ASA and FTD installations covered by the September 2026 hardening advisory...

Cisco ASA Out-of-bounds Write (CVE-2026-20023)

A vulnerability in the OSPF protocol of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, adjacent attacker to corrupt memory on an affected device, resulting in a denial of service DoS condition...

Cisco ASA Improper Input Validation (CVE-2026-20020)

A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, adjacent attacker to cause an affected device to reload unexpectedly, resulting in a DoS condition. If OSPF authentication is enabled, the attacker must know th...

Cisco ASA Improper Restriction of Operations within the Bounds of a Memory Buffer (CVE-2026-20024)

A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an authenticated, adjacent attacker to cause an affected device to reload unexpectedly, resulting in a DoS condition. To exploit this vulnerability, the attacker must have the OSPF...

Cisco ASA Use of Out-of-range Pointer Offset (CVE-2026-20022)

A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, adjacent attacker to cause an affected device to reload unexpectedly, resulting in a DoS condition when OSPF canonicalization debug is enabled by using the...

Cisco Secure Firewall Management Center Software Vulnerabilities (cisco-sa-fmc-mulivulns-4PsnFwvx)

According to its self-reported version, Cisco Secure Firewall Management Center FMC is affected by multiple vulnerabilities. Please see the included Cisco BIDs and Cisco Security Advisory for more information. TRUSTED...

Cisco Secure Firewall Authentication Bypass

The vulnerabilities of the Cisco Secure Firewall Management Center formerly known as Cisco Firepower Management Center and the Cisco Secure Firewall Threat Defense FTD software are related to errors in the certificate validation process. Exploiting these vulnerabilities can allow attackers to...

Cisco Secure Firewall Memory Allocation

The vulnerability of the Cisco Secure Firewall Management Center formerly known as Cisco Firepower Management Center and the Cisco Secure Firewall Threat Defense FTD software lies in the uncontrolled distribution of memory resources. Exploiting this vulnerability could allow a malicious actor to...

Cisco Secure Firewall Management Center Apache JServ Privilege Escalation

The vulnerability of the Apache JServ protocol implementation in Cisco Secure Firewall Management Center formerly Cisco Firepower Management Center is related to deficiencies in the authentication process. Exploiting this vulnerability can allow a malicious actor to increase their privileges...

Cisco Secure Firewall Threat Defense DTLS DoS

The vulnerability of the DTLS protocol implemented by Cisco Secure Firewall Threat Defense FTD and Cisco Secure Firewall Adaptive Security Appliance ASA is related to the failure to release resources after the expiration of their useful life. Exploiting this vulnerability can allow a malicious...

Cisco Secure Firewall DoS

The vulnerability of the EIGRP protocol implementation in Cisco Secure Firewall Threat Defense FTD and Cisco Secure Firewall Adaptive Security Appliance ASA is related to improper memory release. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

Cisco Secure Firewall Threat Defense TLS DoS

The vulnerability of the Cisco Secure Firewall Threat Defense FTD software-based TLS protocol implementation is related to a memory reclamation error. Exploiting this vulnerability could allow an attacker to cause a service failure...

Cisco Secure Firewall IKEv2 DoS

The vulnerability of the IKEv2 protocol implemented by Cisco Secure Firewall Threat Defense FTD and Cisco Secure Firewall Adaptive Security Appliance ASA is related to incorrect data type conversion. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

Cisco Secure Firewall Security Bypass

The vulnerabilities of Cisco Secure Firewall Threat Defense FTD and Cisco Secure Firewall Adaptive Security Appliance ASA, as well as the Cisco Secure Firewall Management Center formerly known as Cisco Firepower Management Center software, are related to the compromise of the data protection...

Cisco Secure Firewall Threat Defense Speed-Limiting Mechanism DoS

The vulnerability of the syslog 419002 mechanism used by Cisco Secure Firewall Threat Defense FTD and Cisco Secure Firewall Adaptive Security Appliance ASA relates to improper memory release. Exploiting this vulnerability could allow a malicious actor to cause a service failure...

Cisco Secure Firewall Management Center Software sftunnel Authentication Bypass (cisco-sa-fmcftd-sftun-multivulns-WGVHOrN3)

According to its self-reported version, Cisco Secure Firewall Management Center FMC is affected by multiple vulnerabilities. - A denial of service DoS vulnerability exists in the sftunnel functionality due to improper memory management. An unauthenticated, remote attacker can exploit this issue,...

Cisco Secure Firewall Threat Defense Software sftunnel Authentication Bypass (cisco-sa-fmcftd-sftun-multivulns-WGVHOrN3)

According to its self-reported version, Cisco Secure Firewall Threat Defense FTD Software is affected by multiple vulnerabilities. - A denial of service DoS vulnerability exists in the sftunnel functionality due to improper memory management. An unauthenticated, remote attacker can exploit this...

Cisco Secure Firewall Threat Defense Software TLS 1.3 DoS (cisco-sa-ftd-tls1-3-dos-dLxwFWgF)

According to its self-reported version, Cisco Secure Firewall Threat Defense FTD Software is affected by a denial of service vulnerability. A flaw exists within the TLS 1.3 implementation due to improper buffer management. An unauthenticated, remote attacker can exploit this issue, via a crafted...