Cisco Secure Firewall Adaptive Security Appliance ASA Software vulnerabilities

19 CVEs affecting Cisco Secure Firewall Adaptive Security Appliance ASA Software, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-20336, published 2026-09-16.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-20099, published 2026-02-25. Medium severity, CVSS 6.7. EPSS: 0.7% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco FXOS Software and Cisco UCS Manager Software could allow an authenticated, local attacker with administrative privileges to perform…
CVE-2024-20260, published 2024-10-23. High severity, CVSS 8.6. EPSS: 0.6% chance of exploitation in the next 30 days. Update for September 16, 2026: The original 1.0 version of this advisory was specific to the Cisco Adaptive Security Virtual Appliance (ASAv) and Cisco Secure Firewall Threat Defense Virtual (FTDv)…
CVE-2026-20250, published 2026-09-16. High severity, CVSS 8.6. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability in Datagram TLS (DTLS) message handling of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software for Cisco Secure…
CVE-2026-20121, published 2026-09-16. Medium severity, CVSS 5.3. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability in the access control list (ACL) Object Group Search (OGS) implementation of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense…
CVE-2026-20329, published 2026-09-16. Critical severity, CVSS 9.9. EPSS: 0.4% chance of exploitation in the next 30 days. As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure…
CVE-2026-20120, published 2026-09-16. Medium severity, CVSS 5.8. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability in the access control list (ACL) Object Group Search (OGS) implementation of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense…
CVE-2026-20154, published 2026-09-16. High severity, CVSS 8.6. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability in the system rate-limiting process for syslog message 419002 of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD)…
CVE-2026-20249, published 2026-09-16. High severity, CVSS 8.6. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability in the certification authentication feature of Internet Key Exchange version 2 (IKEv2) for Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure…
CVE-2026-20248, published 2026-09-16. Medium severity, CVSS 6.8. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability in the DNS over TCP implementation of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an…
CVE-2026-20330, published 2026-09-16. Critical severity, CVSS 9.9. EPSS: 0.3% chance of exploitation in the next 30 days. As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure…

Latest

CVE-2026-20336, published 2026-09-16. High severity, CVSS 8.8. EPSS: 0.2% chance of exploitation in the next 30 days. As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure…
CVE-2026-20335, published 2026-09-16. High severity, CVSS 8.1. EPSS: 0.3% chance of exploitation in the next 30 days. As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure…
CVE-2026-20334, published 2026-09-16. High severity, CVSS 8.4. EPSS: 0.3% chance of exploitation in the next 30 days. As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure…
CVE-2026-20333, published 2026-09-16. High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days. As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure…
CVE-2026-20332, published 2026-09-16. Critical severity, CVSS 9.9. EPSS: 0.3% chance of exploitation in the next 30 days. As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure…
CVE-2026-20222, published 2026-09-16. High severity, CVSS 7.4. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability in the EIGRP implementation in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated,…