VulnerabilityBleeping Computer
8.6 — CRITICAL
Cisco warns of ASA and FTD VPN flaw exploited to crash devices
Cisco is warning that a high-severity denial-of-service vulnerability in Secure Firewall ASA and Threat Defense (FTD) software is being actively exploited in attacks to remotely crash affected devices. [...]
🤖 AI BriefingAuto-generated threat analysis
🔍Threat Overview
A high-severity denial-of-service vulnerability (CVE-2026-20349) in Cisco Secure Firewall ASA and FTD software is being actively exploited, allowing attackers to remotely crash affected devices by sending a crafted HTTP request.
⚙️Technical Details
💥Impact Assessment
Severity: High
🛡️Recommended Actions
1Apply hot fixes to affected ASA and FTD software releases
2Disable SSL listen sockets on vulnerable devices
3Upgrade to fixed software releases as soon as possible
📦Affected Products
Software:Cisco Secure Firewall Adaptive Security Appliance (ASA) SoftwareCisco Secure Firewall Threat Defense (FTD) SoftwareHardware:
🔐NVD Verified DataVERIFIED
CVE-2026-20349 ↗CVSS 8.6 — HIGH
Attack Vector
NETWORK
Complexity
LOW
Vector String
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:HWeaknesses
CWE-244
Read the full article
This is a curated summary. The complete article is available at Bleeping Computer.