CVE Listesine Dön
CVE-2026-20349 CISA KEV · Aktif SömürülüyorOtomatik saldırıya uygun · CISA

Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service Vulnerability

CVSS Skor

8.6

EPSS İhtimal

%1.0

Risk Skoru

0.2

Yayın

2 ay önce

Geçici azaltım mevcut

Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.

Envanterimdeki Etkisi

Yalnızca hesabınıza eklediğiniz kişisel ürünler değerlendirilir; kurumsal envanter burada görünmez.

Oturum kontrol ediliyor…

Zafiyet Açıklaması

DayBreach CVE AI Araştırması

CVE-2026-20349 için toplanan üretici, dağıtım, yama ve güvenlik kaynağı kayıtlarını karşılaştırıp kanıt bağlantılı bir açıklama hazırlayalım.

A vulnerability in the Remote Access SSL VPN service for Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition.  This vulnerability is due to insufficient error checking when processing HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to the Remote Access SSL VPN service on an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition.

IMPACT — Etkilenen Ürünler ve Yazılımlar

Affected Products

The following products are affected by CVE-2026-20349 vulnerability. Even if our threat engine is aware of the exact versions of the products that are affected, the information is represented below.

IDVENDORPRODUCTACTION
1ciscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software İncele
2ciscoCisco Secure Firewall Threat Defense (FTD) Software İncele
3ciscoadaptive security appliance software İncele
4ciscoadaptive security appliance software İncele
5ciscoadaptive security appliance software İncele
6ciscoadaptive security appliance software İncele
7ciscoadaptive security appliance software İncele
8ciscoadaptive security appliance software İncele
9ciscoadaptive security appliance software İncele
10ciscoadaptive security appliance software İncele
11ciscoadaptive security appliance software İncele
12ciscoadaptive security appliance software İncele
13ciscoadaptive security appliance software İncele
14ciscoadaptive security appliance software İncele
15ciscoadaptive security appliance software İncele
16ciscoadaptive security appliance software İncele
17ciscoadaptive security appliance software İncele
18ciscoadaptive security appliance software İncele
19ciscoadaptive security appliance software İncele
20ciscoadaptive security appliance software İncele
21ciscoadaptive security appliance software İncele
22ciscoadaptive security appliance software İncele
23ciscoadaptive security appliance software İncele
24ciscoadaptive security appliance software İncele
25ciscoadaptive security appliance software İncele
26ciscoadaptive security appliance software İncele
27ciscoadaptive security appliance software İncele
28ciscoadaptive security appliance software İncele
29ciscoadaptive security appliance software İncele
30ciscoadaptive security appliance software İncele
31ciscoadaptive security appliance software İncele
32ciscoadaptive security appliance software İncele
33ciscoadaptive security appliance software İncele
34ciscoadaptive security appliance software İncele
35ciscoadaptive security appliance software İncele
36ciscoadaptive security appliance software İncele
37ciscoadaptive security appliance software İncele
38ciscoadaptive security appliance software İncele
39ciscoadaptive security appliance software İncele
40ciscoadaptive security appliance software İncele
41ciscoadaptive security appliance software İncele
42ciscoadaptive security appliance software İncele
43ciscoadaptive security appliance software İncele
44ciscoadaptive security appliance software İncele
45ciscoadaptive security appliance software İncele
46ciscoadaptive security appliance software İncele
47ciscoadaptive security appliance software İncele
48ciscoadaptive security appliance software İncele
49ciscoadaptive security appliance software İncele
50ciscoadaptive security appliance software İncele
51ciscoadaptive security appliance software İncele
52ciscoadaptive security appliance software İncele
53ciscoadaptive security appliance software İncele
54ciscoadaptive security appliance software İncele
55ciscoadaptive security appliance software İncele
56ciscoadaptive security appliance software İncele
57ciscoadaptive security appliance software İncele
58ciscoadaptive security appliance software İncele
59ciscoadaptive security appliance software İncele
60ciscoadaptive security appliance software İncele
61ciscoadaptive security appliance software İncele
62ciscoadaptive security appliance software İncele
63ciscoadaptive security appliance software İncele
64ciscoadaptive security appliance software İncele
65ciscoadaptive security appliance software İncele
66ciscoadaptive security appliance software İncele
67ciscoadaptive security appliance software İncele
68ciscoadaptive security appliance software İncele
69ciscoadaptive security appliance software İncele
70ciscoadaptive security appliance software İncele
71ciscoadaptive security appliance software İncele
72ciscoadaptive security appliance software İncele
73ciscoadaptive security appliance software İncele
74ciscoadaptive security appliance software İncele
75ciscoadaptive security appliance software İncele
76ciscoadaptive security appliance software İncele
77ciscoadaptive security appliance software İncele
78ciscoadaptive security appliance software İncele
79ciscoadaptive security appliance software İncele
80ciscoadaptive security appliance software İncele
81ciscoadaptive security appliance software İncele
82ciscoadaptive security appliance software İncele
83ciscoadaptive security appliance software İncele
84ciscoadaptive security appliance software İncele
85ciscoadaptive security appliance software İncele
86ciscoadaptive security appliance software İncele
87ciscoadaptive security appliance software İncele
88ciscoadaptive security appliance software İncele
89ciscoadaptive security appliance software İncele
90ciscoadaptive security appliance software İncele
91ciscoadaptive security appliance software İncele
92ciscoadaptive security appliance software İncele
93ciscoadaptive security appliance software İncele
94ciscoadaptive security appliance software İncele
95ciscoadaptive security appliance software İncele
96ciscoadaptive security appliance software İncele
97ciscoadaptive security appliance software İncele
98ciscoadaptive security appliance software İncele
99ciscoadaptive security appliance software İncele
100ciscoadaptive security appliance software İncele
101ciscoadaptive security appliance software İncele
102ciscoadaptive security appliance software İncele
103ciscoadaptive security appliance software İncele
104ciscoadaptive security appliance software İncele
105ciscoadaptive security appliance software İncele
106ciscoadaptive security appliance software İncele
107ciscoadaptive security appliance software İncele
108ciscoadaptive security appliance software İncele
109ciscoadaptive security appliance software İncele
110ciscoadaptive security appliance software İncele
111ciscoadaptive security appliance software İncele
112ciscoadaptive security appliance software İncele
113ciscoadaptive security appliance software İncele
114ciscoadaptive security appliance software İncele
115ciscoadaptive security appliance software İncele
116ciscoadaptive security appliance software İncele
117ciscoadaptive security appliance software İncele
118ciscoadaptive security appliance software İncele
119ciscoadaptive security appliance software İncele
120ciscoadaptive security appliance software İncele
121ciscoadaptive security appliance software İncele
122ciscoadaptive security appliance software İncele
123ciscoadaptive security appliance software İncele
124ciscoadaptive security appliance software İncele
125ciscoadaptive security appliance software İncele
126ciscoadaptive security appliance software İncele
127ciscoadaptive security appliance software İncele
128ciscoadaptive security appliance software İncele
129ciscoadaptive security appliance software İncele
130ciscoadaptive security appliance software İncele
131ciscoadaptive security appliance software İncele
132ciscoadaptive security appliance software İncele
133ciscoadaptive security appliance software İncele
134ciscoadaptive security appliance software İncele
135ciscoadaptive security appliance software İncele
136ciscosecure firewall threat defense İncele
137ciscosecure firewall threat defense İncele
138ciscosecure firewall threat defense İncele
139ciscosecure firewall threat defense İncele
140ciscosecure firewall threat defense İncele
141ciscosecure firewall threat defense İncele
142ciscosecure firewall threat defense İncele
143ciscosecure firewall threat defense İncele
144ciscosecure firewall threat defense İncele
145ciscosecure firewall threat defense İncele
146ciscosecure firewall threat defense İncele
147ciscosecure firewall threat defense İncele
148ciscosecure firewall threat defense İncele
149ciscosecure firewall threat defense İncele
150ciscosecure firewall threat defense İncele
151ciscosecure firewall threat defense İncele
152ciscosecure firewall threat defense İncele
153ciscosecure firewall threat defense İncele
154ciscosecure firewall threat defense İncele
155ciscosecure firewall threat defense İncele
156ciscosecure firewall threat defense İncele
157ciscosecure firewall threat defense İncele
158ciscosecure firewall threat defense İncele
159ciscosecure firewall threat defense İncele
160ciscosecure firewall threat defense İncele
161ciscosecure firewall threat defense İncele
162ciscosecure firewall threat defense İncele
163ciscosecure firewall threat defense İncele
164ciscosecure firewall threat defense İncele
165ciscosecure firewall threat defense İncele
166ciscosecure firewall threat defense İncele
167ciscosecure firewall threat defense İncele
168ciscosecure firewall threat defense İncele
169ciscosecure firewall threat defense İncele
170ciscosecure firewall threat defense İncele
171ciscosecure firewall threat defense İncele
172ciscosecure firewall threat defense İncele
173ciscosecure firewall threat defense İncele
174ciscosecure firewall threat defense İncele
175ciscosecure firewall threat defense İncele
176ciscosecure firewall threat defense İncele
177ciscosecure firewall threat defense İncele
178ciscosecure firewall threat defense İncele
179ciscosecure firewall threat defense İncele
180ciscosecure firewall threat defense İncele
181ciscosecure firewall threat defense İncele
182ciscosecure firewall threat defense İncele
183ciscosecure firewall threat defense İncele
184ciscosecure firewall threat defense İncele
185ciscosecure firewall threat defense İncele
186ciscosecure firewall threat defense İncele
187ciscosecure firewall threat defense İncele
188ciscosecure firewall threat defense İncele
189ciscosecure firewall threat defense İncele
190ciscosecure firewall threat defense İncele
191ciscosecure firewall threat defense İncele
192ciscosecure firewall threat defense İncele
193ciscosecure firewall threat defense İncele
194ciscosecure firewall threat defense İncele
195ciscosecure firewall threat defense İncele
196ciscosecure firewall threat defense İncele
197ciscosecure firewall threat defense İncele
198ciscosecure firewall threat defense İncele
199ciscosecure firewall threat defense İncele
200ciscoSecure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) İncele
Total Affected Vendor: 1|Products: 200

RED HAT CSAF/VEX — Ürün Etki Kontrolü

Red Hat bu CVE için henüz bir CSAF/VEX etki kaydı yayımlamamış. Bu durum “etkilenmiyor” anlamına gelmez.

SCORING — CVSS Çoklu Kaynak Skoru

CVSS Scores

The Common Vulnerability Scoring System is a standardized framework for assessing the severity of vulnerabilities in software and systems. We collect and display CVSS scores from various sources for each CVE.

SCOREVERSIONSEVERITYVECTORSOURCE
8.6CVSS V3_1HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:HCVE CNA
8.6CVSS V31HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:HNVD

Yama ve İyileştirme Rehberi (Solution)

Solution & Remediation Advisory

Geçici çözüm

Resmî yama doğrulanamadı; geçici azaltım veya workaround mevcut.

canonical

Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.

Etkilenen ürün ve sürümü yukarıdaki kaynak kanıtlarıyla doğrulayın.
İnternete açık servislerde erişimi kısıtlayın ve ağ segmentasyonu uygulayın.
Yama doğrulanana kadar üretici bültenini izleyin; bilinmeyen durumu “yama yok” olarak yorumlamayın.
Sunucu günlüklerini ve ağ uçlarını anormal çalıştırma belirtileri için izleyin.

Public exploit ve aktif sömürü durumu

Doğrulanmış exploit istihbaratı

Bu CVE CISA KEV kataloğunda aktif sömürülen olarak işaretli; ancak henüz doğrulanmış, indirilebilir bir public PoC veya Metasploit modülü bulunamadı. Aktif sömürü kanıtı public exploit kodu bulunduğu anlamına gelmez.

Zafiyet Dağılımı ve Saldırı Kalıpları (CWE & CAPEC)

CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorizes the common flaws or weaknesses that can lead to vulnerabilities. CVE-2026-20349 is associated with the following CWEs:

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2026-20349 weaknesses.

Saldırı Vektörü ve Erişilebilirlik Karakteristiği

ErişimAğ üzerinden
YetkiGerekmiyor
KullanıcıGerekmiyor

Resmi Kaynaklar ve Danışma Bültenleri

CVSS Vektör Radar Grafiği

8.6 / 10
Attack VectorNetworkComplexityLowPrivilegesNoneUser Interact.NoneConfidentialityLowIntegrityNoneAvailabilityHigh

Vulnerability Scoring Details

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Attack VectorNetwork (Ağ)
Attack ComplexityLow (Düşük)
Privileges RequiredNone (Gerekmiyor)
User InteractionNone (Gerekmiyor)
Confidentiality (Gizlilik)Low (Düşük)
Integrity (Bütünlük)None (Yok)
Availability (Erişilebilirlik)High (Yüksek)

Geçici çözüm

Resmî yama doğrulanamadı; geçici azaltım veya workaround mevcut.

Üreticiyi takip et

C
cisco logo
cisco

Zafiyet Türü (CWE & CAPEC)

İlgili Benzer Açıklar

Bu açığı API ile alın

Etkilenen ürünler, sürüm aralıkları, istismar durumu ve yama bilgisi tek istekte; ücretsiz anahtarla.

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-20349"