CVE-2026-20131-Post-Incident-Written-Report

CVE-2026-20131-تقرير-مكتوب-بعد-الحادث يحلل هذا التقرير المكتوب بعد الحادث استغلال CVE-2026-20131، وهي ثغرة حرجة من نوع zero-day تسمح بتنفيذ التعليمات البرمجية عن بُعد RCE دون مصادقة في Cisco Secure Firewall Management Center FMC. يغطي المستند ناقل الاختراق الأولي عبر إلغاء تسلسل كائنات Java...

Cisco ASA Use of Out-of-range Pointer Offset (CVE-2026-20022)

A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, adjacent attacker to cause an affected device to reload unexpectedly, resulting in a DoS condition when OSPF canonicalization debug is enabled by using the...

Cisco ASA Improper Restriction of Operations within the Bounds of a Memory Buffer (CVE-2026-20024)

A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an authenticated, adjacent attacker to cause an affected device to reload unexpectedly, resulting in a DoS condition. To exploit this vulnerability, the attacker must have the OSPF...

Cisco ASA Improper Input Validation (CVE-2026-20020)

A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, adjacent attacker to cause an affected device to reload unexpectedly, resulting in a DoS condition. If OSPF authentication is enabled, the attacker must know th...

Cisco ASA Out-of-bounds Write (CVE-2026-20023)

A vulnerability in the OSPF protocol of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, adjacent attacker to corrupt memory on an affected device, resulting in a denial of service DoS condition...

Cisco Secure Firewall ASA & FTD - Authentication Bypass

A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to access restricted URL endpoints that are related to remote access VPN that should...

Cisco Secure Firewall Management Center Software Vulnerabilities (cisco-sa-fmc-mulivulns-4PsnFwvx)

According to its self-reported version, Cisco Secure Firewall Management Center FMC is affected by multiple vulnerabilities. Please see the included Cisco BIDs and Cisco Security Advisory for more information. TRUSTED...

The vulnerability of the Cisco Secure Firewall Management Center (formerly known as Cisco Firepower Management Center) and the Cisco Secure Firewall Threat Defense (FTD) software lies in errors related to the authentication process. These errors allow attackers to bypass existing security mechanisms or cause service interruptions.

The vulnerabilities of the Cisco Secure Firewall Management Center formerly known as Cisco Firepower Management Center and the Cisco Secure Firewall Threat Defense FTD software are related to errors in the certificate validation process. Exploiting these vulnerabilities can allow attackers to...

The vulnerabilities of the Cisco Secure Firewall Management Center (formerly known as Cisco Firepower Management Center) and the Cisco Secure Firewall Threat Defense (FTD) software are related to uncontrolled memory allocation. This allows attackers to bypass existing security mechanisms or cause service interruptions.

The vulnerability of the Cisco Secure Firewall Management Center formerly known as Cisco Firepower Management Center and the Cisco Secure Firewall Threat Defense FTD software lies in the uncontrolled distribution of memory resources. Exploiting this vulnerability could allow a malicious actor to...

The vulnerability of the EIGRP protocol implementation in Cisco Secure Firewall Threat Defense (FTD) and Cisco Secure Firewall Adaptive Security Appliance (ASA) allows attackers to induce service interruptions.

The vulnerability of the EIGRP protocol implementation in Cisco Secure Firewall Threat Defense FTD and Cisco Secure Firewall Adaptive Security Appliance ASA is related to improper memory release. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

The vulnerability of the Cisco Secure Firewall Threat Defense (FTD) software-based TLS protocol implementation allows a attacker to cause a service failure.

The vulnerability of the Cisco Secure Firewall Threat Defense FTD software-based TLS protocol implementation is related to a memory reclamation error. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the IKEv2 protocol implementation in Cisco Secure Firewall Threat Defense (FTD) and Cisco Secure Firewall Adaptive Security Appliance (ASA) allows attackers to induce service interruptions.

The vulnerability of the IKEv2 protocol implemented by Cisco Secure Firewall Threat Defense FTD and Cisco Secure Firewall Adaptive Security Appliance ASA is related to incorrect data type conversion. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the speed-limiting mechanism in syslog 419002 of Cisco Secure Firewall Threat Defense (FTD) and Cisco Secure Firewall Adaptive Security Appliance (ASA) allows a attacker to trigger a service failure.

The vulnerability of the syslog 419002 mechanism used by Cisco Secure Firewall Threat Defense FTD and Cisco Secure Firewall Adaptive Security Appliance ASA relates to improper memory release. Exploiting this vulnerability could allow a malicious actor to cause a service failure...

The vulnerabilities of Cisco Secure Firewall Threat Defense (FTD) and Cisco Secure Firewall Adaptive Security Appliance (ASA), as well as the Cisco Secure Firewall Management Center (formerly Cisco Firepower Management Center) software, are related to a flaw in the data protection mechanism. This flaw allows attackers to bypass existing security measures.

The vulnerabilities of Cisco Secure Firewall Threat Defense FTD and Cisco Secure Firewall Adaptive Security Appliance ASA, as well as the Cisco Secure Firewall Management Center formerly known as Cisco Firepower Management Center software, are related to the compromise of the data protection...

The vulnerability of the DTLS protocol implementation in Cisco Secure Firewall Threat Defense (FTD) and Cisco Secure Firewall Adaptive Security Appliance (ASA) allows a attacker to induce a service failure.

The vulnerability of the DTLS protocol implemented by Cisco Secure Firewall Threat Defense FTD and Cisco Secure Firewall Adaptive Security Appliance ASA is related to the failure to release resources after the expiration of their useful life. Exploiting this vulnerability can allow a malicious...

The vulnerability of the Apache JServ protocol implementation in the Cisco Secure Firewall Management Center (formerly Cisco Firepower Management Center) software for network administration allows a perpetrator to increase their privileges.

The vulnerability of the Apache JServ protocol implementation in Cisco Secure Firewall Management Center formerly Cisco Firepower Management Center is related to deficiencies in the authentication process. Exploiting this vulnerability can allow a malicious actor to increase their privileges...

Cisco Secure Firewall Threat Defense Software TLS 1.3 DoS (cisco-sa-ftd-tls1-3-dos-dLxwFWgF)

According to its self-reported version, Cisco Secure Firewall Threat Defense FTD Software is affected by a denial of service vulnerability. A flaw exists within the TLS 1.3 implementation due to improper buffer management. An unauthenticated, remote attacker can exploit this issue, via a crafted...

Cisco Secure Firewall Management Center Software sftunnel Authentication Bypass (cisco-sa-fmcftd-sftun-multivulns-WGVHOrN3)

According to its self-reported version, Cisco Secure Firewall Management Center FMC is affected by multiple vulnerabilities. - A denial of service DoS vulnerability exists in the sftunnel functionality due to improper memory management. An unauthenticated, remote attacker can exploit this issue,...

Cisco Secure Firewall Threat Defense Software sftunnel Authentication Bypass (cisco-sa-fmcftd-sftun-multivulns-WGVHOrN3)

According to its self-reported version, Cisco Secure Firewall Threat Defense FTD Software is affected by multiple vulnerabilities. - A denial of service DoS vulnerability exists in the sftunnel functionality due to improper memory management. An unauthenticated, remote attacker can exploit this...

CVE-2026-20335

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure Firewall Management Center Software engineering team has conducted a comprehensive internal securi...