Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software
48 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-76418 | 9.16.1 ; 9.16.1.28 ; 9.16.2 ; … | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Serv… | HIGH 8.6 | 0.9 % | KEV | |
| CVE-2026-20121 | 9.23.1 ; 9.22.1.1 ; 9.22.1.3 ; … | CIsco FTD Bypass Access List | MEDIUM 5.3 | 0.5 % | ||
| CVE-2026-20120 | 9.23.1 ; 9.22.1.1 ; 9.22.1.3 ; … | Cisco FTD ACL bypass vulnerability | MEDIUM 5.8 | 0.5 % | ||
| CVE-2026-20248 | 9.16.1 ; 9.16.1.28 ; 9.16.2 ; … | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software TCP DNS Denial of Service Vulnerability | MEDIUM 6.8 | 0.5 % | ||
| CVE-2026-20333 | 9.16.1 ; 9.16.1.28 ; 9.16.2 ; … | Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software… | HIGH 8.8 | 0.5 % | ||
| CVE-2026-20334 | 9.16.1 ; 9.16.1.28 ; 9.16.2 ; … | Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software… | HIGH 8.4 | 0.4 % | ||
| CVE-2026-20332 | 9.16.1 ; 9.16.1.28 ; 9.16.2 ; … | Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software… | CRITICAL 9.9 | 0.4 % | ||
| CVE-2026-20154 | 9.16.1 ; 9.16.1.28 ; 9.16.2 ; … | Cisco Secure Firewall Adaptive Security Appliance Software and Secure Firewall Threat Defense Software Logging Denial of Service | HIGH 8.6 | 0.6 % | ||
| CVE-2026-20222 | 9.19.1 ; 9.19.1.5 ; 9.19.1.9 ; … | Cisco Secure Adaptive Security Appliance Software and Secure Firewall Threat Defense Software EIGRP Denial of Service Vulnerability | HIGH 7.4 | 0.3 % | ||
| CVE-2026-20336 | 9.16.1 ; 9.16.1.28 ; 9.16.2 ; … | Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software… | HIGH 8.8 | 0.3 % | ||
| CVE-2026-20249 | 9.16.1 ; 9.16.1.28 ; 9.16.2 ; … | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software IKEv2 Certificate Authentication Denial of … | HIGH 8.6 | 0.4 % | ||
| CVE-2026-20335 | 9.16.1 ; 9.16.1.28 ; 9.16.2 ; … | Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software… | HIGH 8.1 | 0.4 % | ||
| CVE-2026-20250 | 9.23.1 ; 9.22.1.1 ; 9.22.1.3 ; … | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software for Firepower 3100 and 4200 Series DTLS Den… | HIGH 8.6 | 0.6 % | ||
| CVE-2026-20330 | 9.16.1 ; 9.16.1.28 ; 9.16.2 ; … | Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software… | CRITICAL 9.9 | 0.5 % | ||
| CVE-2026-20329 | 9.16.1 ; 9.16.1.28 ; 9.16.2 ; … | Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software… | CRITICAL 9.9 | 0.5 % | ||
| CVE-2026-20331 | 9.16.1 ; 9.16.1.28 ; 9.16.2 ; … | Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software… | CRITICAL 9.6 | 0.3 % | ||
| CVE-2026-20349 | 9.16.1 ; 9.16.1.28 ; 9.16.2 ; … | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service Vul… | HIGH 8.6 | 1.0 % | KEV | |
| CVE-2026-20012 | 9.8.1 ; 9.8.1.5 ; 9.8.1.7 ; … | A vulnerability in the Internet Key Exchange version 2 (IKEv2) feature of Cisco IOS Software, Cisco IOS XE Software, Cisco Secure Firewall A | HIGH 8.6 | 0.4 % | ||
| CVE-2026-20025 | 9.12.1 ; 9.12.1.2 ; 9.12.1.3 ; … | A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an authenticated, adjac | MEDIUM 6.8 | 0.2 % | ||
| CVE-2026-20024 | 9.12.1 ; 9.12.1.2 ; 9.12.1.3 ; … | A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an authenticated, adjac | MEDIUM 6.8 | 0.2 % | ||
| CVE-2026-20023 | 9.12.1 ; 9.12.1.2 ; 9.12.1.3 ; … | A vulnerability in the OSPF protocol of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat De | MEDIUM 6.5 | 0.2 % | ||
| CVE-2026-20022 | 9.12.1 ; 9.12.1.2 ; 9.12.1.3 ; … | A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, adj | MEDIUM 6.5 | 0.2 % | ||
| CVE-2026-20021 | 9.12.1 ; 9.12.1.2 ; 9.12.1.3 ; … | A vulnerability in the OSPF protocol of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat De | MEDIUM 4.3 | 0.2 % | ||
| CVE-2026-20020 | 9.12.1 ; 9.12.1.2 ; 9.12.1.3 ; … | A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, adj | MEDIUM 6.8 | 0.3 % | ||
| CVE-2026-20073 | 9.12.3 ; 9.12.1 ; 9.12.2 ; … | Cisco Secure Firewall Adaptive Security Appliance Software and Cisco Secure Firewall Threat Defense Software Access Control List Bypass V… | MEDIUM 5.8 | 0.4 % | ||
| CVE-2026-20102 | 9.16.1 ; 9.16.1.28 ; 9.16.2 ; … | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software SAML Reflected Cross-Site Scripting Vulnera… | MEDIUM 6.1 | 0.3 % | ||
| CVE-2026-20070 | 9.12.3 ; 9.12.1 ; 9.12.2 ; … | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software VPN Web Services Cross-Site Scripting Vulne… | MEDIUM 6.1 | 0.3 % | ||
| CVE-2026-20069 | 9.12.3 ; 9.12.1 ; 9.12.2 ; … | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software VPN Web Services Client-Side Request Smuggl… | MEDIUM 4.3 | 0.3 % | ||
| CVE-2026-20082 | 9.20.4.14 | A vulnerability in the handling of the embryonic connection limits in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software could | HIGH 8.6 | 0.5 % | ||
| CVE-2026-20062 | 9.17.1 ; 9.17.1.7 ; 9.17.1.9 ; … | A vulnerability in the CLI of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software in multiple context mode could allow an authe | HIGH 7.2 | 0.1 % | ||
| CVE-2026-20049 | 9.12.4.7 ; 9.12.4.10 ; 9.12.4.13 ; … | A vulnerability in the processing of Galois/Counter Mode (GCM)-encrypted Internet Key Exchange version 2 (IKEv2) IPsec traffic of Cisco Secu | HIGH 7.7 | 0.3 % | ||
| CVE-2026-20015 | 9.18.1 ; 9.18.1.3 ; 9.18.2 ; … | A vulnerability in the IKEv2 feature of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, rem | MEDIUM 5.8 | 0.4 % | ||
| CVE-2026-20014 | 9.18.1 ; 9.18.1.3 ; 9.18.2 ; … | A vulnerability in the IKEv2 feature of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an authenticated, remot | HIGH 7.7 | 0.3 % | ||
| CVE-2026-20013 | 9.12.1 ; 9.12.1.2 ; 9.12.1.3 ; … | A vulnerability in the IKEv2 feature of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, rem | MEDIUM 5.8 | 0.4 % | ||
| CVE-2026-20106 | 9.12.1 ; 9.12.1.2 ; 9.12.1.3 ; … | A vulnerability in the Remote Access SSL VPN, HTTP management and MUS functionality, of Cisco Secure Firewall Adaptive Security Appliance (A | MEDIUM 5.3 | 0.4 % | ||
| CVE-2026-20105 | 9.12.1 ; 9.12.1.2 ; 9.12.1.3 ; … | A vulnerability in the Remote Access SSL VPN functionality of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Fi | HIGH 7.7 | 0.4 % | ||
| CVE-2026-20103 | 9.12.4.48 ; 9.12.4.50 ; 9.12.4.52 ; … | A vulnerability in the Remote Access SSL VPN functionality of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Fi | HIGH 8.6 | 0.4 % | ||
| CVE-2026-20101 | 9.12.1 ; 9.12.1.2 ; 9.12.1.3 ; … | A vulnerability in the SAML 2.0 single sign-on (SSO) feature of Cisco Secure Firewall ASA Software and Secure FTD Software could allow an un | HIGH 8.6 | 0.4 % | ||
| CVE-2026-20100 | 9.12.1 ; 9.12.1.2 ; 9.12.1.3 ; … | A vulnerability in the LUA interperter of the Remote Access SSL VPN feature of Cisco Secure Firewall Adaptive Security Appliance (ASA) Softw | HIGH 7.7 | 0.3 % | ||
| CVE-2026-20039 | 9.12.3 ; 9.12.1 ; 9.12.2 ; … | Cisco Adaptive Security Appliance and Firepower Threat Defense Software SSL VPN Authentication Denial of Service Vulnerability | HIGH 8.6 | 0.4 % | ||
| CVE-2026-20008 | 9.12.3 ; 9.12.1 ; 9.12.2 ; … | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Lua Code Injection Vulnerability | MEDIUM 6.0 | 0.2 % | ||
| CVE-2026-20009 | 9.17.1 ; 9.17.1.7 ; 9.17.1.9 ; … | Cisco Secure Firewall Adaptive Security Appliance SSH Partial Private Key Authentication Bypass Vulnerability | MEDIUM 5.3 | 0.4 % | ||
| CVE-2026-20099 | 9.12.2 ; 9.12.1 ; 9.12.3 ; … | Cisco UCS Manager and FXOS Software Command Injection Vulnerability | MEDIUM 6.7 | 0.7 % | ||
| CVE-2026-20091 | 9.12.2 ; 9.12.1 ; 9.12.3 ; … | Cisco UCS Manager and FXOS Software Stored Cross-Site Scripting Vulnerability | MEDIUM 4.8 | 0.2 % | ||
| CVE-2025-20362 | 9.8.1 ; 9.8.1.5 ; 9.8.1.7 ; … | Update: On November 5, 2025, Cisco became aware of a new attack variant against devices running Cisco Secure ASA Software or Cisco Secure FT | HIGH 8.6 | 87 % | KEV | |
| CVE-2025-20333 | 9.8.1 ; 9.8.1.5 ; 9.8.1.7 ; … | A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat D | CRITICAL 9.9 | 71 % | KEV | |
| CVE-2024-20260 | 9.16.1 ; 9.16.1.28 ; 9.16.2 ; … | Cisco Adaptive Security Virtual Appliance and Secure Firewall Threat Defense Virtual SSL VPN Denial of Service Vulnerability | HIGH 8.6 | 0.6 % | ||
| CVE-2024-20358 | 9.8.1 ; 9.8.1.5 ; 9.8.1.7 ; … | A vulnerability in the Cisco Adaptive Security Appliance (ASA) restore functionality that is available in Cisco ASA Software and Cisco Firep | MEDIUM 6.7 | 0.7 % |