CVE-2026-20336
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk10th percentile - higher than 10% of all known CVEs
Summary
A vulnerability in Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software, and Cisco Secure Firewall Management Center Software relates to improper control of a resource through its lifetime, grouped under CWE-664. It was discovered during an internal security review and addressed in a software hardening release.
Risk Assessment
Resource control issues could lead to unexpected system behavior, such as memory leaks, uncontrolled resource consumption, or potential DoS conditions, impacting service availability.
Recommendation
Apply the software hardening release provided by Cisco, which includes fixes for these internally discovered vulnerabilities.
Other vulnerabilities in Cisco Secure ASA Software
See all- CVE-2026-20330Critical
Cisco's engineering team conducted a comprehensive internal security review of Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software, and Cisco Secure Firewall Management Center Software, resulting in a hardening release. The vulnerabilities tracked by CVE-2026-20330 are related to improper neutralization issues grouped under CWE Pillar CWE-707.
- CVE-2026-20329Critical
Cisco's engineering team conducted a comprehensive internal security review of Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software, and Cisco Secure Firewall Management Center Software, resulting in a hardening release. The vulnerabilities tracked by CVE-2026-20329 are related to improper handling of exceptional conditions grouped under CWE Pillar CWE-703.
- CVE-2026-20335High
A vulnerability in Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software, and Cisco Secure Firewall Management Center Software relates to incorrect calculation issues, grouped under CWE-682. It was discovered during an internal security review and addressed in a software hardening release.
Original NVD description (English source)
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure Firewall Management Center Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20336 are related to issues concerning improper control of a resource through its lifetime that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-664.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS