Cybersecurity News • 1d
Cisco Secure Firewall ASA and FTD 0-Day Vulnerability Exploitation
CVE-2026-20349 is a critical zero-day vulnerability (CVSS 8.6) affecting Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) software. The flaw originates from insufficient error checking during the processing of malformed HTTP requests, allowing unauthenticated remote attackers to trigger a complete system crash. This results in a Denial of Service (DoS) state, causing the immediate collapse of VPN connectivity and total disruption of firewall-mediated network traffic. Immediate remediation via vendor security patches is required to prevent perimeter security failure and restore operational availability.