CVE-2026-20054

Cisco CVE-2026-20054 affects Snort 3 VBA feature. The vulnerability stems from improper error checking when decompressing VBA data, allowing an unauthenticated attacker to send crafted VBA to the Snort 3 Detection Engine and force an infinite loop, resulting in DoS. CVSS‑3.1 metrics: AV:N/AC:L/PR...

CVE-2026-20064

CVE-2026-20064 affects Cisco Secure Firewall Threat Defense (FTD) Software. The issue stems from improper validation of user-supplied input, enabling an authenticated, local attacker to inject crafted CLI commands and cause the device to reload, resulting in a DoS. The vulnerability is categorize...

CVE-2026-20016

Cisco FXOS Software CLI contains an input-validation flaw that can allow an authenticated, local attacker with admin credentials to execute arbitrary commands on the underlying OS with root privileges. Root cause: insufficient validation of user-supplied CLI arguments in the Cisco Secure Firewall...

CVE-2026-20050

The CVE-2026-20050 affects Cisco Secure Firewall Threat Defense (FTD) Software, specifically the Do Not Decrypt exclusion feature in the SSL decryption function. The issue arises from improper memory management when inspecting TLS 1.2 encrypted traffic, allowing an unauthenticated, remote attacke...

CVE-2026-20103

CVE-2026-20103 affects Cisco Secure Firewall ASA/FTD Remote Access SSL VPN. The flaw stems from trusting user input without validation, allowing unauthenticated remote attackers to exhaust device memory and cause a DoS, potentially making the web interface temporarily unresponsive. Impact is on n...

CVE-2026-20020

CVE-2026-20020 describes a vulnerability in the OSPF implementation of Cisco Secure Firewall ASA and Secure Firewall FTD software. The issue stems from insufficient input validation when processing OSPF update packets, which could allow an adjacent, unauthenticated attacker to send crafted packet...

CVE-2026-20067

Cisco reports CVE-2026-20067 affects multiple products running the Snort 3 detection engine. The root cause is incomplete error checking when parsing Multicast DNS fields of the HTTP header, exploitable by an unauthenticated, remote attacker sending crafted HTTP packets over the network. Successf...

CVE-2026-20065

Technical details (affected products, components, root cause, impact, remediation) are not publicly provided in the supplied documents. Monitor for updates from Cisco and authoritative advisories to obtain concrete technical information.

CVE-2026-20100

CVE-2026-20100 affects Cisco Secure Firewall ASA/FTD: a vulnerability in the LUA interpreter used by Remote Access SSL VPN could allow an authenticated attacker with a valid VPN connection to cause a device reload and a DoS. The issue stems from unvalidated user input in the LUA interpreter; expl...

CVE-2026-20025

CVE-2026-20025 affects Cisco Secure Firewall ASA/FTD OSPF processing. An authenticated, adjacent attacker with the OSPF secret key can send crafted OSPF LSU packets to trigger insufficient input validation, potentially corrupting the heap and causing the device to reload for a DoS. The vulnerabil...

CVE-2026-20005

Cisco reports that multiple Cisco products using Snort 3 Detection Engine are affected by a vulnerability stemming from incomplete parsing of SSL handshake ingress packets. An unauthenticated, remote attacker can exploit crafted SSL handshake packets to cause the Snort 3 Detection Engine to resta...

CVE-2026-20017

Cisco Secure FTD Software CLI contains a vulnerability due to insufficient input validation of user-supplied CLI arguments. An authenticated, local attacker with valid admin credentials could execute arbitrary OS commands as root. Impact is privilege escalation with potential for high confidentia...

CVE-2026-20021

Cisco Secure Firewall ASA/FTD products are affected by CVE-2026-20021 due to a flaw in the OSPF protocol input validation when parsing packets. Affected software ranges include Cisco Secure Firewall ASA and Cisco Secure Firewall Threat Defense (FTD). An authenticated, adjacent attacker can exploi...

CVE-2026-20068

CVE-2026-20068 affects Cisco products using the Snort 3 detection engine. The vulnerability arises from incomplete error checking when parsing remote procedure call (RPC) data, allowing an unauthenticated remote attacker to send crafted RPC packets over an established connection and cause Snort 3...

CVE-2026-20106

Cisco Secure Firewall ASA/FTD Software vulnerability CVE-2026-20106 exposes Remote Access SSL VPN, HTTP management, and MUS functionality to unauthenticated, remote exploitation. The issue stems from insufficient input validation, allowing crafted packets to exhaust device memory and cause a DoS ...

CVE-2026-20022

CVE-2026-20022 affects Cisco Secure Firewall ASA/FTD OSPF processing. The root cause is insufficient input validation when handling OSPF LSU packets, allowing an unauthenticated, adjacent attacker to send crafted OSPF packets that could write outside packet data, trigger a device reload, and caus...

CVE-2026-20023

Summary: CVE-2026-20023 affects Cisco Secure Firewall ASA/FTD OSPF protocol handling. The issue is memory corruption when parsing OSPF packets, enabling an unauthenticated, adjacent attacker to cause memory corruption and a reboot, resulting in DoS. Affected products: Cisco Secure Firewall ASA so...

CVE-2026-20057

CVE-2026-20057 affects multiple Cisco products via the Snort 3 VBA feature. The issue stems from lack of proper error checking when decompressing VBA data, enabling an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to crash and restart, resulting in a DoS (availability imp...

CVE-2026-20066

CVE-2026-20066 affects multiple Cisco products using the Snort 3 Detection Engine. The issue stems from JSTokenizer normalization logic during HTTP inspection of JavaScript, allowing an unauthenticated remote attacker to trigger a DoS by causing the Snort 3 engine to restart, interrupting packet ...

CVE-2026-20024

CVE-2026-20024 affects Cisco Secure Firewall ASA Software and Cisco Secure FTD Software. The root cause is heap corruption in the OSPF service when parsing packets, exploitable by an adjacent, authenticated attacker who has the OSPF secret key. Successful exploitation can cause the device to relo...

CVE-2026-20105

CVE-2026-20105 affects Cisco Secure Firewall ASA and Secure Firewall Threat Defense (FTD) software, where the Remote Access SSL VPN component may exhaust device memory via crafted packets, causing a reload and DoS. The issue arises from trusting user input without validation. An authenticated rem...

CVE-2026-20015

CVE-2026-20015 affects Cisco Secure Firewall ASA Software and Cisco Secure FTD Software. A memory leak during parsing of IKEv2 packets could allow an unauthenticated remote attacker to cause a DoS that may impact availability of services to devices elsewhere in the network. Exploitation requires ...

CVE-2026-20058

CVE-2026-20058 affects Cisco products featuring the Snort 3 VBA capability. The issue stems from improper error checking when decompressing VBA data in the Snort 3 Detection Engine, which could allow an unauthenticated, remote attacker to send crafted VBA data over the network and cause the Detec...

CVE-2026-20101

Cisco Secure Firewall ASA Software and Secure FTD Software are affected by a SAML 2.0 SSO vulnerability. The issue stems from insufficient error checking when processing SAML messages, which could allow an unauthenticated, remote attacker to cause the device to reload, resulting in a DoS conditio...