CVE-2026-20333: Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Incorrect Comparison Vulnerabilities
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure Firewall Management Center Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20333 are related to incorrect comparison conditions that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-697.
Affected Software
Event History
Frequently Asked Questions
Which products are in scope?
The advisory identifies Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software, and Cisco Secure Firewall Management Center Software.
What level of access does an attacker need?
The CVSS vector indicates an attacker needs network access and low privileges. User interaction is not required.
What impact could successful exploitation have?
The CVSS vector rates confidentiality, integrity, and availability impact as high. Scope is unchanged.
Are affected versions or mitigations provided here?
No affected version ranges, fixed releases, configuration prerequisites, workarounds, or detection guidance are included in the provided data.