CVE-2026-20330
CriticalCVSS 9.9Summary
Cisco's engineering team conducted a comprehensive internal security review of Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software, and Cisco Secure Firewall Management Center Software, resulting in a hardening release. The vulnerabilities tracked by CVE-2026-20330 are related to improper neutralization issues grouped under CWE Pillar CWE-707.
Risk Assessment
These vulnerabilities could allow an attacker to bypass security mechanisms or perform unauthorized actions, potentially compromising system integrity and confidentiality.
Recommendation
Apply the latest updates for Cisco Secure ASA, Firewall Threat Defense, and Firewall Management Center. Regularly review configurations for security.
Other vulnerabilities in Cisco Secure ASA Software
See all- CVE-2026-20336High
A vulnerability in Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software, and Cisco Secure Firewall Management Center Software relates to improper control of a resource through its lifetime, grouped under CWE-664. It was discovered during an internal security review and addressed in a software hardening release.
- CVE-2026-20335High
A vulnerability in Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software, and Cisco Secure Firewall Management Center Software relates to incorrect calculation issues, grouped under CWE-682. It was discovered during an internal security review and addressed in a software hardening release.
- CVE-2026-20329Critical
Cisco's engineering team conducted a comprehensive internal security review of Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software, and Cisco Secure Firewall Management Center Software, resulting in a hardening release. The vulnerabilities tracked by CVE-2026-20329 are related to improper handling of exceptional conditions grouped under CWE Pillar CWE-703.
Original NVD description (English source)
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure Firewall Management Center Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20330 are related to improper neutralization issues that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-707.