Cisco Firewall Flaw Actively Exploited in the Wild

Cisco warned on Tuesday that a new high-severity vulnerability affecting its Secure Firewall Adaptive Security Appliance (ASA) and Threat Defense (FTD) Software has been actively exploited in the wild. The flaw, tracked as CVE-2026-20349 with a CVSS score of 8.6, stems from insufficient error checking when processing HTTP requests.

An unauthenticated, remote attacker can exploit this vulnerability by sending a crafted HTTP request to the Remote Access SSL VPN service. “A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition,” Cisco explained in its advisory.

The issue impacts devices running vulnerable versions of ASA or FTD software with specific configurations enabled, including IKEv2 Remote Access VPN, SSL-VPN, or Zero Trust Network Access. Cisco stated that no workarounds are available to address the flaw, which was discovered during internal security testing.

Valerio Brussani was also credited for independently discovering and reporting the vulnerability. While Cisco confirmed active exploitation earlier this month, no details have been released regarding the nature of the attacks, the threat actor’s identity, or which organizations have been targeted.

Consequently, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added the flaw to its Known Exploited Vulnerabilities catalog, as noted in an August 11 alert. The agency now requires Federal Civilian Executive Branch agencies to apply the available fixes by August 14, 2026.

✅ Follow BITNEWSBOT on Telegram, Facebook, LinkedIn, X.com, and Google News for instant updates.

Previous Articles:

• 3 Signs Bitcoin Could Reclaim $100k Sooner – New Study Shows
• AMD Eyes Billions from Helios as AI Revenue Set to Surge in 2027
• CFTC orders Kalshi to keep operating amid New York gambling lawsuit
• SEC, CFTC sue Goliath Ventures over $400M crypto Ponzi scheme
• Aug Patch Tuesday: Zero-day exploited, 4 critical RCEs