CVE-2026-20329: Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Exceptional Conditions Handling Vulnerabilities
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure Firewall Management Center Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20329 are related to issues concerning improper handling of exceptional conditions that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-703.
Affected Software
Event History
Frequently Asked Questions
Does exploitation require prior access or user interaction?
The CVSS vector indicates an attacker needs low-level privileges and does not require user interaction. The attack vector is network-based and has low attack complexity.
Which deployments should be assessed?
Assess deployments running Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software, or Cisco Secure Firewall Management Center Software. The supplied information does not identify affected versions or state whether default configurations are affected.
What impact could successful exploitation have?
The CVSS vector rates confidentiality, integrity, and availability impacts as high, with scope changed. The overall severity is critical, scored 9.9.