CVE-2026-20336
HighCVSS 8.8Summary
A vulnerability in Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software, and Cisco Secure Firewall Management Center Software relates to improper control of a resource through its lifetime, grouped under CWE-664. It was discovered during an internal security review and addressed in a software hardening release.
Risk Assessment
Resource control issues could lead to unexpected system behavior, such as memory leaks, uncontrolled resource consumption, or potential DoS conditions, impacting service availability.
Recommendation
Apply the software hardening release provided by Cisco, which includes fixes for these internally discovered vulnerabilities.
Other vulnerabilities in Cisco Secure ASA Software
See all- CVE-2026-20335High
A vulnerability in Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software, and Cisco Secure Firewall Management Center Software relates to incorrect calculation issues, grouped under CWE-682. It was discovered during an internal security review and addressed in a software hardening release.
- CVE-2026-20330Critical
Cisco's engineering team conducted a comprehensive internal security review of Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software, and Cisco Secure Firewall Management Center Software, resulting in a hardening release. The vulnerabilities tracked by CVE-2026-20330 are related to improper neutralization issues grouped under CWE Pillar CWE-707.
- CVE-2026-20329Critical
Cisco's engineering team conducted a comprehensive internal security review of Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software, and Cisco Secure Firewall Management Center Software, resulting in a hardening release. The vulnerabilities tracked by CVE-2026-20329 are related to improper handling of exceptional conditions grouped under CWE Pillar CWE-703.
Original NVD description (English source)
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure Firewall Management Center Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20336 are related to issues concerning improper control of a resource through its lifetime that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-664.