EUVD-2026-81133
GHSA-2vf5-qc6p-8g6v
Severity by source
AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H
Accepting Cisco's vendor-asserted metrics: network-reachable but gated by high-privilege auth (PR:H) plus required user interaction (UI:R), with a scope-crossing full-impact outcome (S:C, C/I/A:H).
Primary rating from Vendor (cisco).
CVSS VectorNVD
Lifecycle Timeline
2DescriptionNVD
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure Firewall Management Center Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.
The vulnerabilities tracked by CVE-2026-20334 are related to issues concerning improper adherence to coding standards that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-710.
AnalysisAI
Multiple internally-discovered coding-standard defects in Cisco Secure Firewall ASA Software, Threat Defense (FTD) Software, and Firewall Management Center (FMC) Software can be triggered by an attacker who already holds high-privilege administrative credentials and who can also induce a separate user interaction, potentially yielding high confidentiality, integrity, and availability impact that crosses a security scope boundary (CVSS 8.4, CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H). The affected trains span ASA 9.16 through 9.24, FTD 7.0 through 10.0.0, and FMC 7.0 through 10.0.1. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires PR:H - valid high-privilege administrative credentials on the Cisco Secure ASA, FTD, or FMC software - AND UI:R, a separate user interaction to trigger the defect, per the CVSS vector. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | This is a vendor-asserted, grouped hardening-release entry (Cisco advisory cisco-sa-hardening-asaftdfmc-uvpPROhN) covering multiple internally-discovered issues bundled under CWE-710 (Improper Adherence to Coding Standards, a Pillar-level category), not a single discrete flaw with public root-cause detail. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Patch status: patch available per vendor advisory - Cisco published a software hardening release that addresses these internally discovered issues under advisory cisco-sa-hardening-asaftdfmc-uvpPROhN (https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-asaftdfmc-uvpPROhN); the specific fixed build numbers for each ASA 9.16-9.24, FTD 7.0-10.0, and FMC 7.0-10.0.1 train are enumerated in that advisory and are not restated in the provided data, so verify the exact fixed image against the advisory before upgrading. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, verify whether your organization uses affected Cisco Secure Firewall ASA (9.16-9.24), Threat Defense (7.0-10.0.0), or Firewall Management Center (7.0-10.0.1) software, and immediately restrict administrative access to these systems to only trusted networks and users with multi-factor authentication enabled. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Improper access control defects in Cisco Secure Firewall ASA, FTD, and FMC software allow an authenticated, low-privileg
Multiple improper neutralization flaws in Cisco Secure Firewall ASA, Threat Defense (FTD), and Management Center (FMC) s
Improper handling of exceptional conditions across Cisco Secure Firewall ASA Software, Threat Defense (FTD) Software, an
A hardening release for Cisco Secure Adaptive Security Appliance (ASA) Software, Cisco Secure Firewall Threat Defense (F
Unauthenticated attackers on an adjacent network segment can exploit multiple resource lifetime flaws (CWE-664) in Cisco
Sustained TCP SYN floods directed at Cisco Secure Firewall ASA and FTD devices can drive the appliance into high CPU uti
Unauthenticated remote attackers can crash the IKEv2 process on Cisco Secure Firewall ASA and FTD software configured fo
Unauthenticated, remote denial of service affecting Cisco Secure Firewall Adaptive Security Appliance (ASA) and Threat D
Multiple internally discovered incorrect-calculation flaws in Cisco Secure Firewall ASA Software, Secure Firewall Threat
Denial of service in Cisco Secure Firewall ASA and FTD Software allows a network-adjacent, unauthenticated attacker to r
Cisco Secure Firewall ASA and FTD software contain a logic error in the DNS over TCP response handler that can be trigge
Access-control bypass in Cisco Secure Firewall ASA and Threat Defense (FTD) software allows an unauthenticated, remote a
Same weakness CWE-710 – Improper Adherence to Coding Standards
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today