CVE-2026-20331

Medienbericht

EPSS 0.23%
Veröffentlicht 16.09.2026 16:56:18
Zuletzt bearbeitet 18.09.2026 20:17:14
Erkennungen
Login

Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Protection Mechanism Failure Vulnerabilities

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure Firewall Management Center Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.  

The vulnerabilities tracked by CVE-2026-20331 are related to the failure of protection mechanisms issues that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-693.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 5

CNA 3 VulnDex Vulnerability Enrichment 2

Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).

HerstellerCisco

≫

Produkt Cisco Secure Firewall Adaptive Security Appliance (ASA) Software

Default Statusunknown

Version 9.16.1

Status affected

Version 9.16.1.28

Status affected

Version 9.16.2

Status affected

Version 9.16.2.3

Status affected

Version 9.16.2.7

Status affected

Version 9.16.2.11

Status affected

Version 9.16.2.13

Status affected

Version 9.16.2.14

Status affected

Version 9.16.3.3

Status affected

Version 9.16.3

Status affected

Version 9.16.3.14

Status affected

Version 9.16.3.15

Status affected

Version 9.18.1.3

Status affected

Version 9.18.2

Status affected

Version 9.16.3.19

Status affected

Version 9.16.3.23

Status affected

Version 9.18.2.5

Status affected

Version 9.16.4

Status affected

Version 9.18.2.7

Status affected

Version 9.16.4.9

Status affected

Version 9.18.2.8

Status affected

Version 9.16.4.14

Status affected

Version 9.18.3

Status affected

Version 9.16.4.18

Status affected

Version 9.18.3.39

Status affected

Version 9.16.4.19

Status affected

Version 9.18.3.46

Status affected

Version 9.16.4.27

Status affected

Version 9.18.3.53

Status affected

Version 9.18.3.55

Status affected

Version 9.16.4.38

Status affected

Version 9.16.4.39

Status affected

Version 9.18.3.56

Status affected

Version 9.20.1

Status affected

Version 9.16.4.42

Status affected

Version 9.18.4

Status affected

Version 9.20.1.5

Status affected

Version 9.18.4.5

Status affected

Version 9.16.4.48

Status affected

Version 9.18.4.8

Status affected

Version 9.20.2

Status affected

Version 9.16.4.55

Status affected

Version 9.18.4.22

Status affected

Version 9.20.2.10

Status affected

Version 9.16.4.57

Status affected

Version 9.18.4.24

Status affected

Version 9.20.2.21

Status affected

Version 9.16.4.61

Status affected

Version 9.18.4.29

Status affected

Version 9.20.2.22

Status affected

Version 9.16.4.62

Status affected

Version 9.18.4.34

Status affected

Version 9.20.3

Status affected

Version 9.16.4.67

Status affected

Version 9.16.4.70

Status affected

Version 9.18.4.40

Status affected

Version 9.23.1

Status affected

Version 9.22.1.1

Status affected

Version 9.16.4.71

Status affected

Version 9.20.3.4

Status affected

Version 9.18.4.47

Status affected

Version 9.20.3.7

Status affected

Version 9.16.4.76

Status affected

Version 9.20.3.9

Status affected

Version 9.18.4.50

Status affected

Version 9.22.1.3

Status affected

Version 9.20.3.10

Status affected

Version 9.22.1.2

Status affected

Version 9.18.4.52

Status affected

Version 9.20.3.13

Status affected

Version 9.22.1.6

Status affected

Version 9.18.4.53

Status affected

Version 9.16.4.82

Status affected

Version 9.22.2

Status affected

Version 9.20.3.16

Status affected

Version 9.19.1.42

Status affected

Version 9.18.4.57

Status affected

Version 9.16.4.84

Status affected

Version 9.23.1.3

Status affected

Version 9.20.3.20

Status affected

Version 9.22.2.4

Status affected

Version 9.23.1.7

Status affected

Version 9.20.4

Status affected

Version 9.22.2.9

Status affected

Version 9.23.1.13

Status affected

Version 9.20.4.7

Status affected

Version 9.22.2.13

Status affected

Version 9.18.4.66

Status affected

Version 9.20.4.10

Status affected

Version 9.23.1.19

Status affected

Version 9.16.4.85

Status affected

Version 9.22.2.14

Status affected

Version 9.18.4.67

Status affected

Version 9.24.1

Status affected

Version 9.18.4.68

Status affected

Version 9.23.1.22

Status affected

Version 9.20.4.14

Status affected

Version 9.22.2.20

Status affected

Version 9.18.4.71

Status affected

Version 9.20.4.19

Status affected

Version 9.23.1.26

Status affected

Version 9.16.4.89

Status affected

Version 9.22.2.32

Status affected

Version 9.18.4.76

Status affected

Version 9.22.3

Status affected

Version 9.24.1.5

Status affected

Version 9.20.4.22

Status affected

Version 9.24.1.9

Status affected

Version 9.20.4.28

Status affected

Version 9.22.3.5

Status affected

Version 9.16.4.92

Status affected

Version 9.18.4.135

Status affected

Version 9.23.1.195

Status affected

Version 9.20.4.30

Status affected

Version 9.24.1.155

Status affected

Version 9.23.1.32

Status affected

Version 9.24.1.11

Status affected

Version 9.20.4.34

Status affected

Version 9.18.4.82

Status affected

Version 9.24.10

Status affected

Version 9.20.4.235

Status affected

HerstellerCisco

≫

Produkt Cisco Secure Firewall Management Center (FMC)

Default Statusunknown

Version 7.0.0

Status affected

Version 7.0.0.1

Status affected

Version 7.0.1

Status affected

Version 7.0.1.1

Status affected

Version 7.0.2

Status affected

Version 7.2.0

Status affected

Version 7.0.2.1

Status affected

Version 7.0.3

Status affected

Version 7.2.0.1

Status affected

Version 7.0.4

Status affected

Version 7.2.1

Status affected

Version 7.0.5

Status affected

Version 7.3.0

Status affected

Version 7.2.2

Status affected

Version 7.3.1

Status affected

Version 7.2.3

Status affected

Version 7.2.3.1

Status affected

Version 7.2.4

Status affected

Version 7.0.6

Status affected

Version 7.2.4.1

Status affected

Version 7.2.5

Status affected

Version 7.3.1.1

Status affected

Version 7.4.0

Status affected

Version 7.0.6.1

Status affected

Version 7.2.5.1

Status affected

Version 7.4.1

Status affected

Version 7.2.6

Status affected

Version 7.4.1.1

Status affected

Version 7.0.6.2

Status affected

Version 7.2.7

Status affected

Version 7.2.5.2

Status affected

Version 7.3.1.2

Status affected

Version 7.2.8

Status affected

Version 7.6.0

Status affected

Version 7.4.2

Status affected

Version 7.2.8.1

Status affected

Version 7.0.6.3

Status affected

Version 7.4.2.1

Status affected

Version 7.2.9

Status affected

Version 7.0.7

Status affected

Version 7.7.0

Status affected

Version 7.4.2.2

Status affected

Version 7.2.10

Status affected

Version 7.6.1

Status affected

Version 7.4.2.3

Status affected

Version 7.0.8

Status affected

Version 7.6.2

Status affected

Version 7.7.10

Status affected

Version 7.2.10.1

Status affected

Version 7.0.8.1

Status affected

Version 7.6.2.1

Status affected

Version 7.2.10.2

Status affected

Version 7.7.10.1

Status affected

Version 7.4.2.4

Status affected

Version 7.4.3

Status affected

Version 7.6.3

Status affected

Version 7.7.11

Status affected

Version 7.6.4

Status affected

Version 10.0.0

Status affected

Version 7.4.4

Status affected

Version 7.4.5

Status affected

Version 7.0.9

Status affected

Version 7.2.11

Status affected

Version 7.7.12

Status affected

Version 7.6.5

Status affected

Version 7.4.6

Status affected

Version 10.0.1

Status affected

Version 7.4.7

Status affected

HerstellerCisco

≫

Produkt Cisco Secure Firewall Threat Defense (FTD) Software

Default Statusunknown

Version 7.0.0.1

Status affected

Version 7.0.1

Status affected

Version 7.0.1.1

Status affected

Version 7.0.2

Status affected

Version 7.0.2.1

Status affected

Version 7.0.3

Status affected

Version 7.0.4

Status affected

Version 7.0.5

Status affected

Version 7.3.0

Status affected

Version 7.3.1

Status affected

Version 7.0.6

Status affected

Version 7.3.1.1

Status affected

Version 7.4.0

Status affected

Version 7.0.6.1

Status affected

Version 7.4.1

Status affected

Version 7.0.6.2

Status affected

Version 7.4.1.1

Status affected

Version 7.3.1.2

Status affected

Version 7.6.0

Status affected

Version 7.4.2

Status affected

Version 7.0.6.3

Status affected

Version 7.4.2.1

Status affected

Version 7.0.7

Status affected

Version 7.7.0

Status affected

Version 7.4.2.2

Status affected

Version 7.6.1

Status affected

Version 7.4.2.3

Status affected

Version 7.0.8

Status affected

Version 7.6.2

Status affected

Version 7.7.10

Status affected

Version 7.7.11

Status affected

Version 7.0.8.1

Status affected

Version 7.6.2.1

Status affected

Version 7.7.10.1

Status affected

Version 7.4.2.4

Status affected

Version 7.4.3

Status affected

Version 7.6.4

Status affected

Version 10.0.0

Status affected

Version 7.4.4

Status affected

Version 7.0.9

Status affected

Version 7.4.7

Status affected

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.23%	0.14

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
Cisco PSIRT	9.6	2.8	6	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L

CWE-693 Protection Mechanism Failure

The product does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.

Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.

VulnDex Intel

Media Report

17.09.2026 15:48

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-asaftdfmc-uvpPROhN

https://nvd.nist.gov/vuln/detail/CVE-2026-20331

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2026-20331

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2026-20331

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2026-20331