What’s Vulnerable › Products

Cisco ASA Software vulnerabilities

392 known vulnerabilities, 14 confirmed exploited in the wild (CISA KEV), 69 published in the last 12 months.

Check whether your Cisco ASA Software version is affected

Exploited Cisco ASA Software vulnerabilities

• CVE-2026-20349 — Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability
• CVE-2025-20362 — Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability
• CVE-2025-20333 — Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability
• CVE-2014-2120 — Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability
• CVE-2024-20481 — Cisco ASA and FTD Denial-of-Service Vulnerability
• CVE-2024-20359 — Cisco ASA and FTD Privilege Escalation Vulnerability
• CVE-2024-20353 — Cisco ASA and FTD Denial of Service Vulnerability
• CVE-2020-3259 — Cisco ASA and FTD Information Disclosure Vulnerability
• CVE-2023-20269 — Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability
• CVE-2016-6367 — Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability
• CVE-2016-6366 — Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability
• CVE-2020-3580 — Cisco ASA and FTD Cross-Site Scripting (XSS) Vulnerability
• CVE-2020-3452 — Cisco ASA and FTD Read-Only Path Traversal Vulnerability
• CVE-2018-0296 — Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability

Latest Cisco ASA Software vulnerabilities

• CVE-2026-76418 — Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service Vulnerability (CVSS 8.6)
• CVE-2026-20336 — Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Resource Lifetime Management Vulnerabilities (CVSS 8.8)
• CVE-2026-20335 — Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Incorrect Calculation Vulnerabilities (CVSS 8.1)
• CVE-2026-20334 — Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Coding Standards Vulnerabilities (CVSS 8.4)
• CVE-2026-20333 — Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Incorrect Comparison Vulnerabilities (CVSS 8.8)
• CVE-2026-20332 — Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Improper Access Control Vulnerabilities (CVSS 9.9)
• CVE-2026-20250 — Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software for Firepower 3100 and 4200 Series DTLS Denial of Service Vulnerability (CVSS 8.6)
• CVE-2026-20249 — Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software IKEv2 Certificate Authentication Denial of Service Vulnerability (CVSS 8.6)
• CVE-2026-20248 — Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software TCP DNS Denial of Service Vulnerability (CVSS 6.8)
• CVE-2026-20222 — Cisco Secure Adaptive Security Appliance Software and Secure Firewall Threat Defense Software EIGRP Denial of Service Vulnerability (CVSS 7.4)
• CVE-2026-20154 — Cisco Secure Firewall Adaptive Security Appliance Software and Secure Firewall Threat Defense Software Logging Denial of Service (CVSS 8.6)
• CVE-2026-20121 — CIsco FTD Bypass Access List (CVSS 5.3)
• CVE-2026-20120 — Cisco FTD ACL bypass vulnerability (CVSS 5.8)
• CVE-2026-20330 — Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Improper Neutralization Vulnerabilities (CVSS 9.9)
• CVE-2026-20329 — Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Exceptional Conditions Handling Vulnerabilities (CVSS 9.9)
• CVE-2026-20331 — Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Protection Mechanism Failure Vulnerabilities (CVSS 9.6)
• CVE-2026-20349 — Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability (CVSS 8.6) — exploited
• CVE-2026-20012 — (CVSS 8.6)
• CVE-2026-20025 — (CVSS 6.8)
• CVE-2026-20024 — (CVSS 5.7)
• CVE-2026-20023 — (CVSS 6.5)
• CVE-2026-20022 — (CVSS 6.5)
• CVE-2026-20021 — (CVSS 4.3)
• CVE-2026-20020 — (CVSS 5.7)
• CVE-2026-20016 — (CVSS 6.7)