vulnerability
Cisco ASA and FTD Flaw Exploited in the Wild Can Trigger Remote DoS
Critical
Summary
A critical vulnerability (CVE-2026-20349, CVSS: 8.6) in Cisco ASA and FTD software has been actively exploited in the wild. This flaw, triggered by a crafted HTTP request, can lead to a denial-of-service condition and is being addressed by Cisco. The vulnerability was discovered during internal testing and reported by Valerio Brussani, and CISA has added it to its KEV catalog, requiring FCEB agencies to patch by August 14, 2026.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data