What’s Vulnerable › Vulnerabilities
CVE-2026-20329: Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Exceptional Conditions Handling Vulnerabilities
- Severity: critical (CVSS 9.9 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.5% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-09-16 · updated 2026-09-18
- Weakness: CWE-703
Description
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure Firewall Management Center Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20329 are related to issues concerning improper handling of exceptional conditions that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-703.
Summary
Cisco released a hardening update for Cisco Secure ASA Software, Secure Firewall Threat Defense Software, and Secure Firewall Management Center Software addressing multiple internally discovered vulnerabilities tracked as CVE-2026-20329. These flaws involve improper handling of exceptional conditions (CWE-703) and carry a critical CVSS score of 9.9, so successful exploitation could seriously impact affected firewalls and management systems. The issue is not listed in CISA KEV and CISA SSVC rates exploitation as none, with EPSS estimating only a 0.5% chance of exploitation within 30 days. Affected organizations should apply the September 2026 hardening release for their respective Cisco ASA, Firepower Threat Defense, and Firepower Management Center deployments.
أصدرت Cisco تحديث تقوية لبرامج Cisco Secure ASA Software وSecure Firewall Threat Defense Software وSecure Firewall Management Center Software يعالج ثغرات متعددة اكتُشفت داخلياً ومُتتبَّعة تحت CVE-2026-20329. تتعلق هذه العيوب بسوء معالجة الحالات الاستثنائية وفق CWE-703، وقد حصلت على درجة CVSS حرجة قدرها 9.9، ما يعني أن استغلالها بنجاح قد يؤثر بشدة على جدران الحماية وأنظمة الإدارة المتأثرة. لا ترد الثغرة في قائمة CISA KEV، وتصنّف CISA SSVC الاستغلال بأنه غير موجود، مع تقدير EPSS لاحتمال الاستغلال خلال 30 يوماً بنسبة 0.5% فقط. على المؤسسات المتأثرة تطبيق إصدار التقوية الصادر في سبتمبر 2026 لعمليات نشر Cisco ASA وFirepower Threat Defense وFirepower Management Center الخاصة بها.
Affected products
- Cisco ASA Software: 9.16.1, 9.16.1.28, 9.16.2, 9.16.2.3, 9.16.2.7, 9.16.2.11 (+115)
- Cisco Firepower Management Center: 7.0.0, 7.0.0.1, 7.0.1, 7.0.1.1, 7.0.2, 7.2.0 (+62)
- Cisco Firepower Threat Defense Software: 7.0.0.1, 7.0.1, 7.0.1.1, 7.0.2, 7.0.2.1, 7.0.3 (+35)
In the news
References
Get alerted when CVE-2026-20329 or the next vulnerability affects your stack