Security Advisory

Cisco Product Security Update Advisory (CVE-2026-20349)

  • Aug 14 2026
Cisco Product Security Update Advisory (CVE-2026-20349)

Cisco Security Update Advisory (CVE-2026-20349)

Cisco has released a security update to address a vulnerability discovered in Cisco Secure Firewall ASA Software and Cisco Secure FTD Software. The vulnerability, identified as CVE-2026-20349, is a denial-of-service (DoS) vulnerability affecting the Remote Access SSL VPN service.

Affected Products and Versions

  • Cisco Secure Firewall ASA Software 9.16 (Without the applicable hotfix).
  • Cisco Secure Firewall ASA Software 9.18 (Without the applicable hotfix).
  • Cisco Secure Firewall ASA Software 9.20 (Without the applicable hotfix).
  • Cisco Secure Firewall ASA Software 9.22 (Without the applicable hotfix).
  • Cisco Secure Firewall ASA Software 9.23(Without the applicable hotfix).
  • Cisco Secure Firewall ASA Software 9.24 (Without the applicable hotfix).
  • Cisco Secure FTD Software 7.0 (Without the applicable hotfix).
  • Cisco Secure FTD Software 7.2 (This hotfix not applied).
  • Cisco Secure FTD Software 7.4 (This hotfix not applied).
  • Cisco Secure FTD Software 7.6 (This hotfix not applied).
  • Cisco Secure FTD Software 7.7 (Hotfix not applied).
  • Cisco Secure FTD Software 10.0 (Hotfix not applied).

Resolution

Cisco has provided a Vulnerability Patch for this vulnerability through its latest update. This document advises updating to the latest version with the Vulnerability Patch, as guided by the reference site.

Applied Hotfix Versions

  • Cisco Secure Firewall ASA Software 9.16: 89.16.4.50.
  • Cisco Secure Firewall ASA Software 9.18: 89.18.4.50.
  • Cisco Secure Firewall ASA Software 9.20: 9.20.4.235.
  • Cisco Secure Firewall ASA Software 9.22: 9.22.3.191.
  • Cisco Secure Firewall ASA Software 9.23: 9.23.1.211.
  • Cisco Secure Firewall ASA Software 9.24: 9.24.1.221.
  • Cisco Secure FTD Software 7.0: 7.0.9.1.
  • Cisco Secure FTD Software 7.2: 7.2.11.1.
  • Cisco Secure FTD Software 7.4: 7.4.7.1.
  • Cisco Secure FTD Software 7.6: 7.6.4.1.
  • Cisco Secure FTD Software 7.7: 7.7.11.1.
  • Cisco Secure FTD Software 10.0: 10.0.0.1.

Reference

  • Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL-VPN Denial of Service vulnerability.
  • Https://sec.Cloudapps.Cisco.Com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-vpn-dos-dzv4mQFF

Tags:
Previous Post

Next Post