CVE-2026-20329

CVE-2026-20329 tracks multiple vulnerabilities in Cisco Secure Adaptive Security Appliance (ASA) Software, Cisco Secure Firewall Threat Defense (FTD) Software, and Cisco Secure Firewall Management Center (FMC) Software, all involving improper handling of exceptional conditions (CWE-703 pillar) and discovered during a comprehensive internal Cisco security review. Cisco is addressing them through a software hardening release rather than describing individual exploitation paths, so the exact trigger conditions per flaw are not itemized in the available data. The CVSS 9.9 (critical) score with AV:N/AC:L/PR:L/UI:N/S:C indicates the flaws are reachable over the network, without user interaction, by an attacker who already holds valid low-privileged credentials (for example, a VPN user or low-privileged management account), and that successful exploitation can affect resources beyond the vulnerable component with high impact to confidentiality, integrity, and availability. Any organization running Cisco ASA, FTD, or FMC is potentially affected, with edge firewalls (ASA/FTD) representing the largest exposed population. Exploitation status: no entry in CISA KEV, no public proof-of-concept, and no known in-the-wild exploitation as of this analysis.

What to do: Review the Cisco PSIRT advisory for CVE-2026-20329 to identify affected releases for your ASA, FTD, and FMC deployments and upgrade to the software hardening release it specifies. Because the CVSS vector indicates a low-privileged authenticated attacker is required, enforce multi-factor authentication on VPN and management access, rotate VPN user and administrative credentials, and restrict management interface exposure to trusted networks. The CVE description is generic, so monitor Cisco PSIRT for expanded detail and updated fixed-version lists.