CVE-2026-20135

Cisco Secure Firewall Threat Defense (FTD) Software is vulnerable to a denial of service (DoS) via its TLS 1.3 implementation . The root cause is improper buffer management during TLS 1.3 connections. An unauthenticated, remote attacker can trigger a DoS by sending a crafted TLS 1.3 packet to a T...

EUVD-2026-81122

A vulnerability in an API of Cisco Identity Services Engine ISE could allow an unauthenticated, remote attacker to bypass authentication. This vulnerability is due to insufficient authentication control on an API endpoint. An attacker could exploit this vulnerability by sending a crafted request ...

CVE-2026-76460

A critical authentication bypass (CVSS 10.0) in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) stems from insufficient authentication control on an API endpoint—described as incorrect use of privileged APIs. An unauthenticated, remote attacker can exploit ...

CVE-2026-76460 Cisco Identity Services Engine Authentication Bypass Vulnerability

A vulnerability in an API of Cisco Identity Services Engine ISE could allow an unauthenticated, remote attacker to bypass authentication. This vulnerability is due to insufficient authentication control on an API endpoint. An attacker could exploit this vulnerability by sending a crafted request ...

CVE-2026-20352 Cisco Identity Services Engine RADIUS Denial of Service Vulnerability

A vulnerability in the RADIUS feature of Cisco Identity Services Engine ISE could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to improper handling of certain RADIUS requests. An attacker could exploit this...

CVE-2026-20352

CVE-2026-20352 affects the RADIUS feature of Cisco Identity Services Engine (ISE) . The root cause is improper handling of certain RADIUS requests, allowing an unauthenticated, remote attacker to send a crafted RADIUS request directly to the device and trigger a denial of service that renders the...

CVE-2026-20352 Cisco Identity Services Engine RADIUS Denial of Service Vulnerability

A vulnerability in the RADIUS feature of Cisco Identity Services Engine ISE could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to improper handling of certain RADIUS requests. An attacker could exploit this...

EUVD-2026-81121

A vulnerability in the RADIUS feature of Cisco Identity Services Engine ISE could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to improper handling of certain RADIUS requests. An attacker could exploit this...

EUVD-2026-81120

A vulnerability in Cisco Adaptive Security Device Manager ASDM single sign-on SSO handler for Cisco Secure FMC Software could allow an unauthenticated, remote attacker to log in as the Cisco ASDM administrator user. This vulnerability is due to improper management of the Cisco ASDM SSO token. An...

CVE-2026-76413 Cisco Secure Firewall Management Center Software Single Sign-On Token Forgery of Administrator Account Vulnerability

A vulnerability in Cisco Adaptive Security Device Manager ASDM single sign-on SSO handler for Cisco Secure FMC Software could allow an unauthenticated, remote attacker to log in as the Cisco ASDM administrator user. This vulnerability is due to improper management of the Cisco ASDM SSO token. An...

CVE-2026-76413

A vulnerability in the Cisco ASDM single sign-on (SSO) handler for Cisco Secure FMC Software allows an unauthenticated, remote attacker to forge a session token and log in as the ASDM administrator. The root cause is improper management of the SSO token . By repeating the attack, an attacker can ...

CVE-2026-20336

Cisco Secure ASA, Secure Firewall Threat Defense (FTD), and Secure Firewall Management Center (FMC) Software are affected by resource lifetime management vulnerabilities (CWE-664), identified through Cisco's internal security review as part of a proactive hardening release. The CVSS 3.1 score is ...

CVE-2026-20336 Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Resource Lifetime Management Vulnerabilities

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure Firewall Management Center Software engineering team has conducted a comprehensive internal securi...

EUVD-2026-81119

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure Firewall Management Center Software engineering team has conducted a comprehensive internal securi...

CVE-2026-20249

A logic error in the IKEv2 certificate authentication phase of Cisco Secure Firewall ASA and FTD Software allows an unauthenticated, remote attacker to send a crafted certificate during IKEv2 VPN connection setup, crashing the IKEv2 process and causing an unexpected device reload (DoS). The vulne...

EUVD-2026-81118

A vulnerability in the certification authentication feature of Internet Key Exchange version 2 IKEv2 for Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause an affected device...

CVE-2026-20249 Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software IKEv2 Certificate Authentication Denial of Service Vulnerability

A vulnerability in the certification authentication feature of Internet Key Exchange version 2 IKEv2 for Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause an affected device...

CVE-2026-20350 Cisco ThousandEyes Virtual Appliance Authenticated Web Interface Command Injection Vulnerability

A vulnerability in the web-based management interface of Cisco ThousandEyes Virtual Appliance could allow an authenticated, remote attacker to inject arbitrary operating system commands. This vulnerability is due to improper validation of user-supplied input to the web-based management interface...

EUVD-2026-81117

A vulnerability in the web-based management interface of Cisco ThousandEyes Virtual Appliance could allow an authenticated, remote attacker to inject arbitrary operating system commands. This vulnerability is due to improper validation of user-supplied input to the web-based management interface...

CVE-2026-20350

CVE-2026-20350 affects the web-based management interface of Cisco ThousandEyes Virtual Appliance , where improper validation of user-supplied input allows an authenticated attacker with administrative credentials to inject arbitrary operating system commands by saving configuration details conta...