CVE-2026-20331
CriticalCVSS 9.6Summary
Cisco conducted an internal security review that resulted in a software hardening release addressing multiple internally discovered vulnerabilities in Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software, and Cisco Secure Firewall Management Center Software. The vulnerabilities tracked by CVE-2026-20331 relate to failure of protection mechanisms (CWE-693).
Risk Assessment
Vulnerabilities related to ineffective protection mechanisms could allow an attacker to bypass security controls and gain unauthorized access. Technical details are not disclosed, but these affect critical network security devices.
Recommendation
Apply the Cisco hardening update for the listed products. Regularly review Cisco security advisories and keep software versions up to date.
Other vulnerabilities in Cisco Secure Firewall
See all- CVE-2026-20023Medium
A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA and FTD Software allows an unauthenticated adjacent attacker to corrupt memory on an affected device, resulting in a DoS condition. This is due to memory corruption when parsing OSPF protocol packets.
- CVE-2026-20022Medium
A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA and FTD Software allows an unauthenticated adjacent attacker to cause an unexpected device reload, resulting in a DoS condition when OSPF canonicalization debug is enabled. This is due to insufficient input validation when processing OSPF LSU packets.
- CVE-2026-20008Medium
A vulnerability in a subset of CLI commands on Cisco Secure Firewall ASA and FTD Software allows an authenticated local attacker with administrator privileges to craft Lua code that could be used on the underlying operating system as root. This exists because user-provided input is not properly sanitized.
Original NVD description (English source)
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure Firewall Management Center Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20331 are related to the failure of protection mechanisms issues that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-693.