CVE-2026-20336

Medienbericht

EPSS 0.2%
Veröffentlicht 16.09.2026 20:11:44
Zuletzt bearbeitet 18.09.2026 20:17:15
Erkennungen
Login

Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Resource Lifetime Management Vulnerabilities

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure Firewall Management Center Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.

The vulnerabilities tracked by CVE-2026-20336 are related to issues concerning improper control of a resource through its lifetime that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-664.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 5

CNA 3 VulnDex Vulnerability Enrichment 2

Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).

HerstellerCisco

≫

Produkt Cisco Secure Firewall Adaptive Security Appliance (ASA) Software

Default Statusunknown

Version 9.16.1

Status affected

Version 9.16.1.28

Status affected

Version 9.16.2

Status affected

Version 9.16.2.3

Status affected

Version 9.16.2.7

Status affected

Version 9.16.2.11

Status affected

Version 9.16.2.13

Status affected

Version 9.16.2.14

Status affected

Version 9.16.3.3

Status affected

Version 9.16.3

Status affected

Version 9.16.3.14

Status affected

Version 9.16.3.15

Status affected

Version 9.18.1.3

Status affected

Version 9.18.2

Status affected

Version 9.16.3.19

Status affected

Version 9.16.3.23

Status affected

Version 9.18.2.5

Status affected

Version 9.16.4

Status affected

Version 9.18.2.7

Status affected

Version 9.16.4.9

Status affected

Version 9.18.2.8

Status affected

Version 9.16.4.14

Status affected

Version 9.18.3

Status affected

Version 9.16.4.18

Status affected

Version 9.18.3.39

Status affected

Version 9.16.4.19

Status affected

Version 9.18.3.46

Status affected

Version 9.16.4.27

Status affected

Version 9.18.3.53

Status affected

Version 9.18.3.55

Status affected

Version 9.16.4.38

Status affected

Version 9.16.4.39

Status affected

Version 9.18.3.56

Status affected

Version 9.20.1

Status affected

Version 9.16.4.42

Status affected

Version 9.18.4

Status affected

Version 9.20.1.5

Status affected

Version 9.18.4.5

Status affected

Version 9.16.4.48

Status affected

Version 9.18.4.8

Status affected

Version 9.20.2

Status affected

Version 9.16.4.55

Status affected

Version 9.18.4.22

Status affected

Version 9.20.2.10

Status affected

Version 9.16.4.57

Status affected

Version 9.18.4.24

Status affected

Version 9.20.2.21

Status affected

Version 9.16.4.61

Status affected

Version 9.18.4.29

Status affected

Version 9.20.2.22

Status affected

Version 9.16.4.62

Status affected

Version 9.18.4.34

Status affected

Version 9.20.3

Status affected

Version 9.16.4.67

Status affected

Version 9.16.4.70

Status affected

Version 9.18.4.40

Status affected

Version 9.23.1

Status affected

Version 9.22.1.1

Status affected

Version 9.16.4.71

Status affected

Version 9.20.3.4

Status affected

Version 9.18.4.47

Status affected

Version 9.20.3.7

Status affected

Version 9.16.4.76

Status affected

Version 9.20.3.9

Status affected

Version 9.18.4.50

Status affected

Version 9.22.1.3

Status affected

Version 9.20.3.10

Status affected

Version 9.22.1.2

Status affected

Version 9.18.4.52

Status affected

Version 9.20.3.13

Status affected

Version 9.22.1.6

Status affected

Version 9.18.4.53

Status affected

Version 9.16.4.82

Status affected

Version 9.22.2

Status affected

Version 9.20.3.16

Status affected

Version 9.19.1.42

Status affected

Version 9.18.4.57

Status affected

Version 9.16.4.84

Status affected

Version 9.23.1.3

Status affected

Version 9.20.3.20

Status affected

Version 9.22.2.4

Status affected

Version 9.23.1.7

Status affected

Version 9.20.4

Status affected

Version 9.22.2.9

Status affected

Version 9.23.1.13

Status affected

Version 9.20.4.7

Status affected

Version 9.22.2.13

Status affected

Version 9.18.4.66

Status affected

Version 9.20.4.10

Status affected

Version 9.23.1.19

Status affected

Version 9.16.4.85

Status affected

Version 9.22.2.14

Status affected

Version 9.18.4.67

Status affected

Version 9.24.1

Status affected

Version 9.18.4.68

Status affected

Version 9.23.1.22

Status affected

Version 9.20.4.14

Status affected

Version 9.22.2.20

Status affected

Version 9.18.4.71

Status affected

Version 9.20.4.19

Status affected

Version 9.23.1.26

Status affected

Version 9.16.4.89

Status affected

Version 9.22.2.32

Status affected

Version 9.18.4.76

Status affected

Version 9.22.3

Status affected

Version 9.24.1.5

Status affected

Version 9.20.4.22

Status affected

Version 9.24.1.9

Status affected

Version 9.20.4.28

Status affected

Version 9.22.3.5

Status affected

Version 9.16.4.92

Status affected

Version 9.18.4.135

Status affected

Version 9.23.1.195

Status affected

Version 9.20.4.30

Status affected

Version 9.24.1.155

Status affected

Version 9.23.1.32

Status affected

Version 9.24.1.11

Status affected

Version 9.20.4.34

Status affected

Version 9.18.4.82

Status affected

Version 9.24.10

Status affected

Version 9.20.4.235

Status affected

HerstellerCisco

≫

Produkt Cisco Secure Firewall Management Center (FMC)

Default Statusunknown

Version 7.0.0

Status affected

Version 7.0.0.1

Status affected

Version 7.0.1

Status affected

Version 7.0.1.1

Status affected

Version 7.0.2

Status affected

Version 7.2.0

Status affected

Version 7.0.2.1

Status affected

Version 7.0.3

Status affected

Version 7.2.0.1

Status affected

Version 7.0.4

Status affected

Version 7.2.1

Status affected

Version 7.0.5

Status affected

Version 7.3.0

Status affected

Version 7.2.2

Status affected

Version 7.3.1

Status affected

Version 7.2.3

Status affected

Version 7.2.3.1

Status affected

Version 7.2.4

Status affected

Version 7.0.6

Status affected

Version 7.2.4.1

Status affected

Version 7.2.5

Status affected

Version 7.3.1.1

Status affected

Version 7.4.0

Status affected

Version 7.0.6.1

Status affected

Version 7.2.5.1

Status affected

Version 7.4.1

Status affected

Version 7.2.6

Status affected

Version 7.4.1.1

Status affected

Version 7.0.6.2

Status affected

Version 7.2.7

Status affected

Version 7.2.5.2

Status affected

Version 7.3.1.2

Status affected

Version 7.2.8

Status affected

Version 7.6.0

Status affected

Version 7.4.2

Status affected

Version 7.2.8.1

Status affected

Version 7.0.6.3

Status affected

Version 7.4.2.1

Status affected

Version 7.2.9

Status affected

Version 7.0.7

Status affected

Version 7.7.0

Status affected

Version 7.4.2.2

Status affected

Version 7.2.10

Status affected

Version 7.6.1

Status affected

Version 7.4.2.3

Status affected

Version 7.0.8

Status affected

Version 7.6.2

Status affected

Version 7.7.10

Status affected

Version 7.2.10.1

Status affected

Version 7.0.8.1

Status affected

Version 7.6.2.1

Status affected

Version 7.2.10.2

Status affected

Version 7.7.10.1

Status affected

Version 7.4.2.4

Status affected

Version 7.4.3

Status affected

Version 7.6.3

Status affected

Version 7.7.11

Status affected

Version 7.6.4

Status affected

Version 10.0.0

Status affected

Version 7.4.4

Status affected

Version 7.4.5

Status affected

Version 7.0.9

Status affected

Version 7.2.11

Status affected

Version 7.7.12

Status affected

Version 7.6.5

Status affected

Version 7.4.6

Status affected

Version 10.0.1

Status affected

Version 7.4.7

Status affected

HerstellerCisco

≫

Produkt Cisco Secure Firewall Threat Defense (FTD) Software

Default Statusunknown

Version 7.0.0.1

Status affected

Version 7.0.1

Status affected

Version 7.0.1.1

Status affected

Version 7.0.2

Status affected

Version 7.0.2.1

Status affected

Version 7.0.3

Status affected

Version 7.0.4

Status affected

Version 7.0.5

Status affected

Version 7.3.0

Status affected

Version 7.3.1

Status affected

Version 7.0.6

Status affected

Version 7.3.1.1

Status affected

Version 7.4.0

Status affected

Version 7.0.6.1

Status affected

Version 7.4.1

Status affected

Version 7.0.6.2

Status affected

Version 7.4.1.1

Status affected

Version 7.3.1.2

Status affected

Version 7.6.0

Status affected

Version 7.4.2

Status affected

Version 7.0.6.3

Status affected

Version 7.4.2.1

Status affected

Version 7.0.7

Status affected

Version 7.7.0

Status affected

Version 7.4.2.2

Status affected

Version 7.6.1

Status affected

Version 7.4.2.3

Status affected

Version 7.0.8

Status affected

Version 7.6.2

Status affected

Version 7.7.10

Status affected

Version 7.7.11

Status affected

Version 7.0.8.1

Status affected

Version 7.6.2.1

Status affected

Version 7.7.10.1

Status affected

Version 7.4.2.4

Status affected

Version 7.4.3

Status affected

Version 7.6.4

Status affected

Version 10.0.0

Status affected

Version 7.4.4

Status affected

Version 7.0.9

Status affected

Version 7.4.7

Status affected

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.2%	0.098

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
Cisco PSIRT	8.8	2.8	5.9	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-664 Improper Control of a Resource Through its Lifetime

The product does not maintain or incorrectly maintains control over a resource throughout its lifetime of creation, use, and release.

Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.

VulnDex Intel

Media Report

17.09.2026 15:48

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-asaftdfmc-uvpPROhN

https://nvd.nist.gov/vuln/detail/CVE-2026-20336

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2026-20336

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2026-20336

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2026-20336