NCSC-2026-0458

Vulnerability from csaf_ncscnl - Published: 2026-10-28 10:28 - Updated: 2026-10-28 10:28
Summary
Kwetsbaarheden verholpen in Cisco Secure Firewall ASA, Threat Defense en Management Center
Notes
The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions: NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein. NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory. This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings.
Feiten: Cisco heeft kwetsbaarheden verholpen in Secure Firewall ASA, Threat Defense en Management Center softwareproducten. Cisco heeft de kwetsbaarheden gegroepeerd naar acht verschillende kwetsbaarheidsklassen (CWE's) en aan iedere groep één CVE-kenmerk toegekend.
Interpretaties: De kwetsbaarheden betreffen verschillende beveiligingsproblemen, waaronder onvoldoende toegangscontrole, onjuiste verwerking van invoergegevens, fouten in beveiligingsmechanismen en onjuiste afhandeling van uitzonderingssituaties. Vier van de acht CVE-registraties hebben een CVSS-score van 9.0 of hoger. De kwetsbaarheden met kenmerk CVE-2026-20329 en CVE-2026-20330 hebben beide een CVSS-score van 9.9. Voor beide kwetsbaarheidsklassen geldt dat misbruik via het netwerk mogelijk is met beperkte gebruikersrechten en zonder gebruikersinteractie. De kwetsbaarheden met kenmerk CVE-2026-20331 en CVE-2026-20332 hebben respectievelijk een CVSS-score van 9.6 en 9.0 en betreffen tekortkomingen in beveiligingsmechanismen en toegangscontrole. Cisco meldt dat twee kwetsbaarheden binnen de categorie toegangscontrole actief worden misbruikt. Het betreft de eerder afzonderlijk gepubliceerde kwetsbaarheden CVE-2026-20079 en CVE-2026-20316 in Cisco Secure FMC. De kwetsbaarheden kunnen respectievelijk leiden tot het omzeilen van authenticatie en het verkrijgen van toegang met statische inloggegevens. Het NCSC heeft voor deze kwetsbaarheden reeds advisories uitgebracht. Voor de overige kwetsbaarheden uit deze hardeningrelease meldt Cisco geen bekend actief misbruik.
Oplossingen: Cisco heeft een hardening update uitgebracht om de kwetsbaarheden in Secure Firewall ASA, Threat Defense en Management Center te verhelpen. Zie bijgevoegde referenties voor meer informatie.
Kans: medium
Schade: high
CWE-288: Authentication Bypass Using an Alternate Path or Channel
CWE-259: Use of Hard-coded Password
CVE-2026-20329

Cisco's engineering team performed a thorough security review of their Secure Firewall ASA, Threat Defense, and Management Center software, releasing a hardening update addressing multiple vulnerabilities including improper handling of exceptional conditions (CVE-2026-20329, CWE-703).

9.9 (Critical)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Affected products
Product Identifier Version Remediation
vers:unknown/*
Cisco / Adaptive Security Appliance
 vers:unknown/*
vers:unknown/*
Cisco / Cisco Secure Firewall Management Center
 vers:unknown/*
vers:unknown/*
Cisco / Firepower Threat Defense
 vers:unknown/*
CVE-2026-20330

Cisco conducted a security review of its Secure Adaptive Security Appliance, Secure Firewall Threat Defense, and Management Center software, releasing a hardening update addressing multiple CWE-707 vulnerabilities tracked under CVE-2026-20330.

9.9 (Critical)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Affected products
Known affected 3 products, the same list as for CVE-2026-20329
CVE-2026-20331

Cisco conducted an internal security review of their Secure Firewall ASA, FTD, and FMC software, resulting in a hardening release addressing multiple vulnerabilities related to protection mechanism failures under CWE-693, tracked by CVE-2026-20331.

9.6 (Critical)
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L
Affected products
Known affected 3 products, the same list as for CVE-2026-20329
CVE-2026-20332

Cisco's engineering team performed an internal security review of Secure Firewall ASA, Threat Defense, and Management Center software, releasing a hardening update addressing multiple access control vulnerabilities including CVE-2026-20332 (CWE-284).

9.9 (Critical)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Affected products
Known affected 3 products, the same list as for CVE-2026-20329
CVE-2026-20333

Cisco conducted a comprehensive internal security review of their Secure Firewall ASA, FTD, and FMC software, resulting in a hardening release addressing multiple vulnerabilities including CVE-2026-20333 related to incorrect comparison conditions.

8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
Known affected 3 products, the same list as for CVE-2026-20329
CVE-2026-20334

Cisco's engineering team performed a thorough security review of their Secure Firewall ASA, Threat Defense, and Management Center software, resulting in a hardening release addressing multiple CWE-710 coding standard vulnerabilities (CVE-2026-20334).

8.4 (High)
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H
Affected products
Known affected 3 products, the same list as for CVE-2026-20329
CVE-2026-20335

Cisco conducted a security review of its Secure Firewall ASA, Threat Defense, and Management Center software, releasing a hardening update that addresses multiple vulnerabilities related to incorrect calculation issues classified under CWE-682 and tracked as CVE-2026-20335.

8.1 (High)
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Known affected 3 products, the same list as for CVE-2026-20329
CVE-2026-20336

Cisco's engineering team performed a comprehensive security review of their Secure Firewall ASA, Threat Defense, and Management Center software, resulting in a hardening release addressing multiple vulnerabilities including improper resource control (CVE-2026-20336, CWE-664).

8.8 (High)
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Known affected 3 products, the same list as for CVE-2026-20329
References
To clipboard 

{
  "document": {
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE"
      }
    },
    "lang": "nl",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n    NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n    NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n    This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
      },
      {
        "category": "description",
        "text": "Cisco heeft kwetsbaarheden verholpen in Secure Firewall ASA, Threat Defense en Management Center softwareproducten. Cisco heeft de kwetsbaarheden gegroepeerd naar acht verschillende kwetsbaarheidsklassen (CWE\u0027s) en aan iedere groep \u00e9\u00e9n CVE-kenmerk toegekend.",
        "title": "Feiten"
      },
      {
        "category": "description",
        "text": "De kwetsbaarheden betreffen verschillende beveiligingsproblemen, waaronder onvoldoende toegangscontrole, onjuiste verwerking van invoergegevens, fouten in beveiligingsmechanismen en onjuiste afhandeling van uitzonderingssituaties. Vier van de acht CVE-registraties hebben een CVSS-score van 9.0 of hoger.\n\nDe kwetsbaarheden met kenmerk CVE-2026-20329 en CVE-2026-20330 hebben beide een CVSS-score van 9.9. Voor beide kwetsbaarheidsklassen geldt dat misbruik via het netwerk mogelijk is met beperkte gebruikersrechten en zonder gebruikersinteractie. De kwetsbaarheden met kenmerk CVE-2026-20331 en CVE-2026-20332 hebben respectievelijk een CVSS-score van 9.6 en 9.0 en betreffen tekortkomingen in beveiligingsmechanismen en toegangscontrole.\n\nCisco meldt dat twee kwetsbaarheden binnen de categorie toegangscontrole actief worden misbruikt. Het betreft de eerder afzonderlijk gepubliceerde kwetsbaarheden CVE-2026-20079 en CVE-2026-20316 in Cisco Secure FMC. De kwetsbaarheden kunnen respectievelijk leiden tot het omzeilen van authenticatie en het verkrijgen van toegang met statische inloggegevens. Het NCSC heeft voor deze kwetsbaarheden reeds advisories uitgebracht. \n\nVoor de overige kwetsbaarheden uit deze hardeningrelease meldt Cisco geen bekend actief misbruik.",
        "title": "Interpretaties"
      },
      {
        "category": "description",
        "text": "Cisco heeft een hardening update uitgebracht om de kwetsbaarheden in Secure Firewall ASA, Threat Defense en Management Center te verhelpen. Zie bijgevoegde referenties voor meer informatie.",
        "title": "Oplossingen"
      },
      {
        "category": "general",
        "text": "medium",
        "title": "Kans"
      },
      {
        "category": "general",
        "text": "high",
        "title": "Schade"
      },
      {
        "category": "general",
        "text": "Authentication Bypass Using an Alternate Path or Channel",
        "title": "CWE-288"
      },
      {
        "category": "general",
        "text": "Use of Hard-coded Password",
        "title": "CWE-259"
      }
    ],
    "publisher": {
      "category": "coordinator",
      "contact_details": "cert@ncsc.nl",
      "name": "Nationaal Cyber Security Centrum",
      "namespace": "https://www.ncsc.nl/"
    },
    "references": [
      {
        "category": "external",
        "summary": "Reference",
        "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-asaftdfmc-uvpPROhN"
      }
    ],
    "title": "Kwetsbaarheden verholpen in Cisco Secure Firewall ASA, Threat Defense en Management Center",
    "tracking": {
      "current_release_date": "2026-10-28T10:28:36.855439Z",
      "generator": {
        "date": "2025-08-04T16:30:00Z",
        "engine": {
          "name": "V.A.",
          "version": "1.3"
        }
      },
      "id": "NCSC-2026-0458",
      "initial_release_date": "2026-10-28T10:28:36.855439Z",
      "revision_history": [
        {
          "date": "2026-10-28T10:28:36.855439Z",
          "number": "1.0.0",
          "summary": "Initiele versie"
        }
      ],
      "status": "final",
      "version": "1.0.0"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-1"
                }
              }
            ],
            "category": "product_name",
            "name": "Adaptive Security Appliance"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-2"
                }
              }
            ],
            "category": "product_name",
            "name": "Cisco Secure Firewall Management Center"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-3"
                }
              }
            ],
            "category": "product_name",
            "name": "Firepower Threat Defense"
          }
        ],
        "category": "vendor",
        "name": "Cisco"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-20329",
      "notes": [
        {
          "category": "description",
          "text": "Cisco\u0027s engineering team performed a thorough security review of their Secure Firewall ASA, Threat Defense, and Management Center software, releasing a hardening update addressing multiple vulnerabilities including improper handling of exceptional conditions (CVE-2026-20329, CWE-703).",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-20329 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20329.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.9,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3"
          ]
        }
      ],
      "title": "CVE-2026-20329"
    },
    {
      "cve": "CVE-2026-20330",
      "notes": [
        {
          "category": "description",
          "text": "Cisco conducted a security review of its Secure Adaptive Security Appliance, Secure Firewall Threat Defense, and Management Center software, releasing a hardening update addressing multiple CWE-707 vulnerabilities tracked under CVE-2026-20330.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-20330 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20330.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.9,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3"
          ]
        }
      ],
      "title": "CVE-2026-20330"
    },
    {
      "cve": "CVE-2026-20331",
      "notes": [
        {
          "category": "description",
          "text": "Cisco conducted an internal security review of their Secure Firewall ASA, FTD, and FMC software, resulting in a hardening release addressing multiple vulnerabilities related to protection mechanism failures under CWE-693, tracked by CVE-2026-20331.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-20331 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20331.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.6,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3"
          ]
        }
      ],
      "title": "CVE-2026-20331"
    },
    {
      "cve": "CVE-2026-20332",
      "notes": [
        {
          "category": "description",
          "text": "Cisco\u0027s engineering team performed an internal security review of Secure Firewall ASA, Threat Defense, and Management Center software, releasing a hardening update addressing multiple access control vulnerabilities including CVE-2026-20332 (CWE-284).",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-20332 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20332.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.9,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3"
          ]
        }
      ],
      "title": "CVE-2026-20332"
    },
    {
      "cve": "CVE-2026-20333",
      "notes": [
        {
          "category": "description",
          "text": "Cisco conducted a comprehensive internal security review of their Secure Firewall ASA, FTD, and FMC software, resulting in a hardening release addressing multiple vulnerabilities including CVE-2026-20333 related to incorrect comparison conditions.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-20333 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20333.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3"
          ]
        }
      ],
      "title": "CVE-2026-20333"
    },
    {
      "cve": "CVE-2026-20334",
      "notes": [
        {
          "category": "description",
          "text": "Cisco\u0027s engineering team performed a thorough security review of their Secure Firewall ASA, Threat Defense, and Management Center software, resulting in a hardening release addressing multiple CWE-710 coding standard vulnerabilities (CVE-2026-20334).",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-20334 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20334.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3"
          ]
        }
      ],
      "title": "CVE-2026-20334"
    },
    {
      "cve": "CVE-2026-20335",
      "notes": [
        {
          "category": "description",
          "text": "Cisco conducted a security review of its Secure Firewall ASA, Threat Defense, and Management Center software, releasing a hardening update that addresses multiple vulnerabilities related to incorrect calculation issues classified under CWE-682 and tracked as CVE-2026-20335.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-20335 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20335.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3"
          ]
        }
      ],
      "title": "CVE-2026-20335"
    },
    {
      "cve": "CVE-2026-20336",
      "notes": [
        {
          "category": "description",
          "text": "Cisco\u0027s engineering team performed a comprehensive security review of their Secure Firewall ASA, Threat Defense, and Management Center software, resulting in a hardening release addressing multiple vulnerabilities including improper resource control (CVE-2026-20336, CWE-664).",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2",
          "CSAFPID-3"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-20336 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20336.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2",
            "CSAFPID-3"
          ]
        }
      ],
      "title": "CVE-2026-20336"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

JSON

Loading timeline…




    Related by attack behaviour

    Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.