CVE-2026-20332

Medienbericht

EPSS 0.3%
Veröffentlicht 16.09.2026 20:13:54
Zuletzt bearbeitet 18.09.2026 20:17:14
Erkennungen
Login

Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Improper Access Control Vulnerabilities

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure Firewall Management Center Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.  

The vulnerabilities tracked by CVE-2026-20332 are related to improper access control issues that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-284.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 5

CNA 3 VulnDex Vulnerability Enrichment 2

Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).

HerstellerCisco

≫

Produkt Cisco Secure Firewall Adaptive Security Appliance (ASA) Software

Default Statusunknown

Version 9.16.1

Status affected

Version 9.16.1.28

Status affected

Version 9.16.2

Status affected

Version 9.16.2.3

Status affected

Version 9.16.2.7

Status affected

Version 9.16.2.11

Status affected

Version 9.16.2.13

Status affected

Version 9.16.2.14

Status affected

Version 9.16.3.3

Status affected

Version 9.16.3

Status affected

Version 9.16.3.14

Status affected

Version 9.16.3.15

Status affected

Version 9.18.1.3

Status affected

Version 9.18.2

Status affected

Version 9.16.3.19

Status affected

Version 9.16.3.23

Status affected

Version 9.18.2.5

Status affected

Version 9.16.4

Status affected

Version 9.18.2.7

Status affected

Version 9.16.4.9

Status affected

Version 9.18.2.8

Status affected

Version 9.16.4.14

Status affected

Version 9.18.3

Status affected

Version 9.16.4.18

Status affected

Version 9.18.3.39

Status affected

Version 9.16.4.19

Status affected

Version 9.18.3.46

Status affected

Version 9.16.4.27

Status affected

Version 9.18.3.53

Status affected

Version 9.18.3.55

Status affected

Version 9.16.4.38

Status affected

Version 9.16.4.39

Status affected

Version 9.18.3.56

Status affected

Version 9.20.1

Status affected

Version 9.16.4.42

Status affected

Version 9.18.4

Status affected

Version 9.20.1.5

Status affected

Version 9.18.4.5

Status affected

Version 9.16.4.48

Status affected

Version 9.18.4.8

Status affected

Version 9.20.2

Status affected

Version 9.16.4.55

Status affected

Version 9.18.4.22

Status affected

Version 9.20.2.10

Status affected

Version 9.16.4.57

Status affected

Version 9.18.4.24

Status affected

Version 9.20.2.21

Status affected

Version 9.16.4.61

Status affected

Version 9.18.4.29

Status affected

Version 9.20.2.22

Status affected

Version 9.16.4.62

Status affected

Version 9.18.4.34

Status affected

Version 9.20.3

Status affected

Version 9.16.4.67

Status affected

Version 9.16.4.70

Status affected

Version 9.18.4.40

Status affected

Version 9.23.1

Status affected

Version 9.22.1.1

Status affected

Version 9.16.4.71

Status affected

Version 9.20.3.4

Status affected

Version 9.18.4.47

Status affected

Version 9.20.3.7

Status affected

Version 9.16.4.76

Status affected

Version 9.20.3.9

Status affected

Version 9.18.4.50

Status affected

Version 9.22.1.3

Status affected

Version 9.20.3.10

Status affected

Version 9.22.1.2

Status affected

Version 9.18.4.52

Status affected

Version 9.20.3.13

Status affected

Version 9.22.1.6

Status affected

Version 9.18.4.53

Status affected

Version 9.16.4.82

Status affected

Version 9.22.2

Status affected

Version 9.20.3.16

Status affected

Version 9.19.1.42

Status affected

Version 9.18.4.57

Status affected

Version 9.16.4.84

Status affected

Version 9.23.1.3

Status affected

Version 9.20.3.20

Status affected

Version 9.22.2.4

Status affected

Version 9.23.1.7

Status affected

Version 9.20.4

Status affected

Version 9.22.2.9

Status affected

Version 9.23.1.13

Status affected

Version 9.20.4.7

Status affected

Version 9.22.2.13

Status affected

Version 9.18.4.66

Status affected

Version 9.20.4.10

Status affected

Version 9.23.1.19

Status affected

Version 9.16.4.85

Status affected

Version 9.22.2.14

Status affected

Version 9.18.4.67

Status affected

Version 9.24.1

Status affected

Version 9.18.4.68

Status affected

Version 9.23.1.22

Status affected

Version 9.20.4.14

Status affected

Version 9.22.2.20

Status affected

Version 9.18.4.71

Status affected

Version 9.20.4.19

Status affected

Version 9.23.1.26

Status affected

Version 9.16.4.89

Status affected

Version 9.22.2.32

Status affected

Version 9.18.4.76

Status affected

Version 9.22.3

Status affected

Version 9.24.1.5

Status affected

Version 9.20.4.22

Status affected

Version 9.24.1.9

Status affected

Version 9.20.4.28

Status affected

Version 9.22.3.5

Status affected

Version 9.16.4.92

Status affected

Version 9.18.4.135

Status affected

Version 9.23.1.195

Status affected

Version 9.20.4.30

Status affected

Version 9.24.1.155

Status affected

Version 9.23.1.32

Status affected

Version 9.24.1.11

Status affected

Version 9.20.4.34

Status affected

Version 9.18.4.82

Status affected

Version 9.24.10

Status affected

Version 9.20.4.235

Status affected

HerstellerCisco

≫

Produkt Cisco Secure Firewall Management Center (FMC)

Default Statusunknown

Version 7.0.0

Status affected

Version 7.0.0.1

Status affected

Version 7.0.1

Status affected

Version 7.0.1.1

Status affected

Version 7.0.2

Status affected

Version 7.2.0

Status affected

Version 7.0.2.1

Status affected

Version 7.0.3

Status affected

Version 7.2.0.1

Status affected

Version 7.0.4

Status affected

Version 7.2.1

Status affected

Version 7.0.5

Status affected

Version 7.3.0

Status affected

Version 7.2.2

Status affected

Version 7.3.1

Status affected

Version 7.2.3

Status affected

Version 7.2.3.1

Status affected

Version 7.2.4

Status affected

Version 7.0.6

Status affected

Version 7.2.4.1

Status affected

Version 7.2.5

Status affected

Version 7.3.1.1

Status affected

Version 7.4.0

Status affected

Version 7.0.6.1

Status affected

Version 7.2.5.1

Status affected

Version 7.4.1

Status affected

Version 7.2.6

Status affected

Version 7.4.1.1

Status affected

Version 7.0.6.2

Status affected

Version 7.2.7

Status affected

Version 7.2.5.2

Status affected

Version 7.3.1.2

Status affected

Version 7.2.8

Status affected

Version 7.6.0

Status affected

Version 7.4.2

Status affected

Version 7.2.8.1

Status affected

Version 7.0.6.3

Status affected

Version 7.4.2.1

Status affected

Version 7.2.9

Status affected

Version 7.0.7

Status affected

Version 7.7.0

Status affected

Version 7.4.2.2

Status affected

Version 7.2.10

Status affected

Version 7.6.1

Status affected

Version 7.4.2.3

Status affected

Version 7.0.8

Status affected

Version 7.6.2

Status affected

Version 7.7.10

Status affected

Version 7.2.10.1

Status affected

Version 7.0.8.1

Status affected

Version 7.6.2.1

Status affected

Version 7.2.10.2

Status affected

Version 7.7.10.1

Status affected

Version 7.4.2.4

Status affected

Version 7.4.3

Status affected

Version 7.6.3

Status affected

Version 7.7.11

Status affected

Version 7.6.4

Status affected

Version 10.0.0

Status affected

Version 7.4.4

Status affected

Version 7.4.5

Status affected

Version 7.0.9

Status affected

Version 7.2.11

Status affected

Version 7.7.12

Status affected

Version 7.6.5

Status affected

Version 7.4.6

Status affected

Version 10.0.1

Status affected

Version 7.4.7

Status affected

HerstellerCisco

≫

Produkt Cisco Secure Firewall Threat Defense (FTD) Software

Default Statusunknown

Version 7.0.0.1

Status affected

Version 7.0.1

Status affected

Version 7.0.1.1

Status affected

Version 7.0.2

Status affected

Version 7.0.2.1

Status affected

Version 7.0.3

Status affected

Version 7.0.4

Status affected

Version 7.0.5

Status affected

Version 7.3.0

Status affected

Version 7.3.1

Status affected

Version 7.0.6

Status affected

Version 7.3.1.1

Status affected

Version 7.4.0

Status affected

Version 7.0.6.1

Status affected

Version 7.4.1

Status affected

Version 7.0.6.2

Status affected

Version 7.4.1.1

Status affected

Version 7.3.1.2

Status affected

Version 7.6.0

Status affected

Version 7.4.2

Status affected

Version 7.0.6.3

Status affected

Version 7.4.2.1

Status affected

Version 7.0.7

Status affected

Version 7.7.0

Status affected

Version 7.4.2.2

Status affected

Version 7.6.1

Status affected

Version 7.4.2.3

Status affected

Version 7.0.8

Status affected

Version 7.6.2

Status affected

Version 7.7.10

Status affected

Version 7.7.11

Status affected

Version 7.0.8.1

Status affected

Version 7.6.2.1

Status affected

Version 7.7.10.1

Status affected

Version 7.4.2.4

Status affected

Version 7.4.3

Status affected

Version 7.6.4

Status affected

Version 10.0.0

Status affected

Version 7.4.4

Status affected

Version 7.0.9

Status affected

Version 7.4.7

Status affected

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.3%	0.23

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
Cisco PSIRT	9.9	3.1	6	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

CWE-284 Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.

VulnDex Intel

Media Report

17.09.2026 15:48

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-asaftdfmc-uvpPROhN

https://nvd.nist.gov/vuln/detail/CVE-2026-20332

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2026-20332

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2026-20332

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2026-20332