CVE-2026-20332criticalCWE-284

CVE-2026-20332: falha crítica em Cisco Secure Firewall Adaptive Security…

Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Improper Access Control Vulnerabilities

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Cisco Secure Firewall Threat Defense+ Monitorar Cisco Secure Firewall Adaptive Security Appliance

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9.9epss 0.4%
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure Firewall Management Center Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.   The vulnerabilities tracked by CVE-2026-20332 are related to improper access control issues that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-284.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Produtos afetados
Cisco · Cisco Secure Firewall Adaptive Security Appliance (ASA) SoftwareCisco · Cisco Secure Firewall Management Center (FMC)Cisco · Cisco Secure Firewall Threat Defense (FTD) Software
CVEs relacionadas — Cisco Secure Firewall Adaptive Security…

No mesmo produto, das mais perigosas para as menos.

CVE-2026-20079CRITICALCisco Secure Firewall Management Center Authentication Bypass Remote Code Execution VulnerabilityEPSS 88.7%KEVCVE-2025-20362MEDIUMCVE-2025-20362EPSS 86.7%KEVCVE-2025-20333CRITICALCVE-2025-20333EPSS 72.0%KEVCVE-2026-20131CRITICALCisco Secure Firewall Management Center Software Remote Code Execution VulnerabilityEPSS 44.4%KEVCVE-2026-20316MEDIUMCisco Secure Firewall Management Center Software Static Credential VulnerabilityEPSS 35.1%KEVCVE-2026-20349HIGHCisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service VulnerabilityEPSS 1.0%KEV