CVE-2026-20330

Medienbericht

EPSS 0.34%
Veröffentlicht 16.09.2026 20:03:09
Zuletzt bearbeitet 18.09.2026 20:17:13
Erkennungen
Login

Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Improper Neutralization Vulnerabilities

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure Firewall Management Center Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.  

The vulnerabilities tracked by CVE-2026-20330 are related to improper neutralization issues that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-707.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 5

CNA 3 VulnDex Vulnerability Enrichment 2

Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).

HerstellerCisco

≫

Produkt Cisco Secure Firewall Adaptive Security Appliance (ASA) Software

Default Statusunknown

Version 9.16.1

Status affected

Version 9.16.1.28

Status affected

Version 9.16.2

Status affected

Version 9.16.2.3

Status affected

Version 9.16.2.7

Status affected

Version 9.16.2.11

Status affected

Version 9.16.2.13

Status affected

Version 9.16.2.14

Status affected

Version 9.16.3.3

Status affected

Version 9.16.3

Status affected

Version 9.16.3.14

Status affected

Version 9.16.3.15

Status affected

Version 9.18.1.3

Status affected

Version 9.18.2

Status affected

Version 9.16.3.19

Status affected

Version 9.16.3.23

Status affected

Version 9.18.2.5

Status affected

Version 9.16.4

Status affected

Version 9.18.2.7

Status affected

Version 9.16.4.9

Status affected

Version 9.18.2.8

Status affected

Version 9.16.4.14

Status affected

Version 9.18.3

Status affected

Version 9.16.4.18

Status affected

Version 9.18.3.39

Status affected

Version 9.16.4.19

Status affected

Version 9.18.3.46

Status affected

Version 9.16.4.27

Status affected

Version 9.18.3.53

Status affected

Version 9.18.3.55

Status affected

Version 9.16.4.38

Status affected

Version 9.16.4.39

Status affected

Version 9.18.3.56

Status affected

Version 9.20.1

Status affected

Version 9.16.4.42

Status affected

Version 9.18.4

Status affected

Version 9.20.1.5

Status affected

Version 9.18.4.5

Status affected

Version 9.16.4.48

Status affected

Version 9.18.4.8

Status affected

Version 9.20.2

Status affected

Version 9.16.4.55

Status affected

Version 9.18.4.22

Status affected

Version 9.20.2.10

Status affected

Version 9.16.4.57

Status affected

Version 9.18.4.24

Status affected

Version 9.20.2.21

Status affected

Version 9.16.4.61

Status affected

Version 9.18.4.29

Status affected

Version 9.20.2.22

Status affected

Version 9.16.4.62

Status affected

Version 9.18.4.34

Status affected

Version 9.20.3

Status affected

Version 9.16.4.67

Status affected

Version 9.16.4.70

Status affected

Version 9.18.4.40

Status affected

Version 9.23.1

Status affected

Version 9.22.1.1

Status affected

Version 9.16.4.71

Status affected

Version 9.20.3.4

Status affected

Version 9.18.4.47

Status affected

Version 9.20.3.7

Status affected

Version 9.16.4.76

Status affected

Version 9.20.3.9

Status affected

Version 9.18.4.50

Status affected

Version 9.22.1.3

Status affected

Version 9.20.3.10

Status affected

Version 9.22.1.2

Status affected

Version 9.18.4.52

Status affected

Version 9.20.3.13

Status affected

Version 9.22.1.6

Status affected

Version 9.18.4.53

Status affected

Version 9.16.4.82

Status affected

Version 9.22.2

Status affected

Version 9.20.3.16

Status affected

Version 9.19.1.42

Status affected

Version 9.18.4.57

Status affected

Version 9.16.4.84

Status affected

Version 9.23.1.3

Status affected

Version 9.20.3.20

Status affected

Version 9.22.2.4

Status affected

Version 9.23.1.7

Status affected

Version 9.20.4

Status affected

Version 9.22.2.9

Status affected

Version 9.23.1.13

Status affected

Version 9.20.4.7

Status affected

Version 9.22.2.13

Status affected

Version 9.18.4.66

Status affected

Version 9.20.4.10

Status affected

Version 9.23.1.19

Status affected

Version 9.16.4.85

Status affected

Version 9.22.2.14

Status affected

Version 9.18.4.67

Status affected

Version 9.24.1

Status affected

Version 9.18.4.68

Status affected

Version 9.23.1.22

Status affected

Version 9.20.4.14

Status affected

Version 9.22.2.20

Status affected

Version 9.18.4.71

Status affected

Version 9.20.4.19

Status affected

Version 9.23.1.26

Status affected

Version 9.16.4.89

Status affected

Version 9.22.2.32

Status affected

Version 9.18.4.76

Status affected

Version 9.22.3

Status affected

Version 9.24.1.5

Status affected

Version 9.20.4.22

Status affected

Version 9.24.1.9

Status affected

Version 9.20.4.28

Status affected

Version 9.22.3.5

Status affected

Version 9.16.4.92

Status affected

Version 9.18.4.135

Status affected

Version 9.23.1.195

Status affected

Version 9.20.4.30

Status affected

Version 9.24.1.155

Status affected

Version 9.23.1.32

Status affected

Version 9.24.1.11

Status affected

Version 9.20.4.34

Status affected

Version 9.18.4.82

Status affected

Version 9.24.10

Status affected

Version 9.20.4.235

Status affected

HerstellerCisco

≫

Produkt Cisco Secure Firewall Management Center (FMC)

Default Statusunknown

Version 7.0.0

Status affected

Version 7.0.0.1

Status affected

Version 7.0.1

Status affected

Version 7.0.1.1

Status affected

Version 7.0.2

Status affected

Version 7.2.0

Status affected

Version 7.0.2.1

Status affected

Version 7.0.3

Status affected

Version 7.2.0.1

Status affected

Version 7.0.4

Status affected

Version 7.2.1

Status affected

Version 7.0.5

Status affected

Version 7.3.0

Status affected

Version 7.2.2

Status affected

Version 7.3.1

Status affected

Version 7.2.3

Status affected

Version 7.2.3.1

Status affected

Version 7.2.4

Status affected

Version 7.0.6

Status affected

Version 7.2.4.1

Status affected

Version 7.2.5

Status affected

Version 7.3.1.1

Status affected

Version 7.4.0

Status affected

Version 7.0.6.1

Status affected

Version 7.2.5.1

Status affected

Version 7.4.1

Status affected

Version 7.2.6

Status affected

Version 7.4.1.1

Status affected

Version 7.0.6.2

Status affected

Version 7.2.7

Status affected

Version 7.2.5.2

Status affected

Version 7.3.1.2

Status affected

Version 7.2.8

Status affected

Version 7.6.0

Status affected

Version 7.4.2

Status affected

Version 7.2.8.1

Status affected

Version 7.0.6.3

Status affected

Version 7.4.2.1

Status affected

Version 7.2.9

Status affected

Version 7.0.7

Status affected

Version 7.7.0

Status affected

Version 7.4.2.2

Status affected

Version 7.2.10

Status affected

Version 7.6.1

Status affected

Version 7.4.2.3

Status affected

Version 7.0.8

Status affected

Version 7.6.2

Status affected

Version 7.7.10

Status affected

Version 7.2.10.1

Status affected

Version 7.0.8.1

Status affected

Version 7.6.2.1

Status affected

Version 7.2.10.2

Status affected

Version 7.7.10.1

Status affected

Version 7.4.2.4

Status affected

Version 7.4.3

Status affected

Version 7.6.3

Status affected

Version 7.7.11

Status affected

Version 7.6.4

Status affected

Version 10.0.0

Status affected

Version 7.4.4

Status affected

Version 7.4.5

Status affected

Version 7.0.9

Status affected

Version 7.2.11

Status affected

Version 7.7.12

Status affected

Version 7.6.5

Status affected

Version 7.4.6

Status affected

Version 10.0.1

Status affected

Version 7.4.7

Status affected

HerstellerCisco

≫

Produkt Cisco Secure Firewall Threat Defense (FTD) Software

Default Statusunknown

Version 7.0.0.1

Status affected

Version 7.0.1

Status affected

Version 7.0.1.1

Status affected

Version 7.0.2

Status affected

Version 7.0.2.1

Status affected

Version 7.0.3

Status affected

Version 7.0.4

Status affected

Version 7.0.5

Status affected

Version 7.3.0

Status affected

Version 7.3.1

Status affected

Version 7.0.6

Status affected

Version 7.3.1.1

Status affected

Version 7.4.0

Status affected

Version 7.0.6.1

Status affected

Version 7.4.1

Status affected

Version 7.0.6.2

Status affected

Version 7.4.1.1

Status affected

Version 7.3.1.2

Status affected

Version 7.6.0

Status affected

Version 7.4.2

Status affected

Version 7.0.6.3

Status affected

Version 7.4.2.1

Status affected

Version 7.0.7

Status affected

Version 7.7.0

Status affected

Version 7.4.2.2

Status affected

Version 7.6.1

Status affected

Version 7.4.2.3

Status affected

Version 7.0.8

Status affected

Version 7.6.2

Status affected

Version 7.7.10

Status affected

Version 7.7.11

Status affected

Version 7.0.8.1

Status affected

Version 7.6.2.1

Status affected

Version 7.7.10.1

Status affected

Version 7.4.2.4

Status affected

Version 7.4.3

Status affected

Version 7.6.4

Status affected

Version 10.0.0

Status affected

Version 7.4.4

Status affected

Version 7.0.9

Status affected

Version 7.4.7

Status affected

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.34%	0.27

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
Cisco PSIRT	9.9	3.1	6	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

CWE-707 Improper Neutralization

The product does not ensure or incorrectly ensures that structured messages or data are well-formed and that certain security properties are met before being read from an upstream component or sent to a downstream component.

Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.

VulnDex Intel

Media Report

17.09.2026 15:48

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-asaftdfmc-uvpPROhN

https://nvd.nist.gov/vuln/detail/CVE-2026-20330

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2026-20330

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2026-20330

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2026-20330