SecurityWeekEduard Kovacs
Cisco patches critical ASA/FTD zero day as attacks spike
Part of the CVE-2026-20349 story · since 11 Aug
Quiet for 2 weekslast report 29 Oct8 articles4 outlets
- Tue 11 Aug, 22:35 UTC. CISA, first report. Cisco ASA/FTD heap bug lets remote attackers crash firewalls. Cites a CVE in CISA KEV.
- Wed 12 Aug, 00:17 UTC. CISA. CISA adds Cisco firewall heap flaw CVE-2026-20349 to KEV catalog. Cites a CVE in CISA KEV.
- Wed 12 Aug, 02:32 UTC. SecurityOnline, its first report on the story. Cisco ASA/FTD flaw lets attackers crash firewalls, CVE-2026-20349. Cites a CVE in CISA KEV.
- Wed 12 Aug, 05:20 UTC. SecurityWeek, its first report on the story. Cisco patches critical ASA/FTD zero day as attacks spike. Cites a CVE in CISA KEV. This article, 4th of 8.
- Wed 12 Aug, 13:32 UTC. SecurityOnline. CVE-2026-61515: Unauthenticated Command Injection in Puwell IP Cameras, PoC Exploit Code Publicly Disclosed. Cites a CVE in CISA KEV.
- Thu 13 Aug, 17:21 UTC. Security Affairs, its first report on the story. CISA Flags Critical Flaws in Metabase, Windows and Cisco Firewall. Cites a CVE in CISA KEV.
- Mon 17 Aug, 02:40 UTC. SecurityOnline. Critical Metabase SQLi flaw lets attackers seize full admin control. Cites a CVE in CISA KEV.
- Thu 29 Oct, 10:30 UTC. SecurityWeek. Cisco fixes exploited VPN flaw that can crash firewalls. Cites a CVE in CISA KEV.
Cisco has released patches for a zero-day vulnerability (CVE-2026-20349) affecting its Secure Firewall ASA and FTD software. This vulnerability allows unauthenticated remote attackers to cause denial-of-service (DoS) conditions by sending specially crafted HTTP requests. Cisco noted active exploitation of this flaw was detected in August 2026. CISA has added this vulnerability to its Known Exploited Vulnerabilities catalog, urging timely patching. This is the twelfth Cisco-related CVE added this year, highlighting ongoing security issues in its products.
How the story developed
Quiet for 2 weekslast report 29 Oct8 articles4 outlets
8 articles from 4 outlets since 11 Aug. Quiet since 29 Oct. This was the 4th report, 7 hours after the first.
- Tue 11 Aug, 22:35 UTC. CISA, first report. Cisco ASA/FTD heap bug lets remote attackers crash firewalls. Cites a CVE in CISA KEV.
- Wed 12 Aug, 00:17 UTC. CISA. CISA adds Cisco firewall heap flaw CVE-2026-20349 to KEV catalog. Cites a CVE in CISA KEV.
- Wed 12 Aug, 02:32 UTC. SecurityOnline, its first report on the story. Cisco ASA/FTD flaw lets attackers crash firewalls, CVE-2026-20349. Cites a CVE in CISA KEV.
- Wed 12 Aug, 05:20 UTC. SecurityWeek, its first report on the story. Cisco patches critical ASA/FTD zero day as attacks spike. Cites a CVE in CISA KEV. This article, 4th of 8.
- Wed 12 Aug, 13:32 UTC. SecurityOnline. CVE-2026-61515: Unauthenticated Command Injection in Puwell IP Cameras, PoC Exploit Code Publicly Disclosed. Cites a CVE in CISA KEV.
- Thu 13 Aug, 17:21 UTC. Security Affairs, its first report on the story. CISA Flags Critical Flaws in Metabase, Windows and Cisco Firewall. Cites a CVE in CISA KEV.
- Mon 17 Aug, 02:40 UTC. SecurityOnline. Critical Metabase SQLi flaw lets attackers seize full admin control. Cites a CVE in CISA KEV.
- Thu 29 Oct, 10:30 UTC. SecurityWeek. Cisco fixes exploited VPN flaw that can crash firewalls. Cites a CVE in CISA KEV.
- Known exploited CVE
- No CVE
- Larger: an outlet’s first report
- Square: official source
- Coverage over time
- Quiet time, folded
Show all 8 articles as a listHide the list
- Tue 11 AugDay 01
- Cisco ASA/FTD heap bug lets remote attackers crash firewalls22:35 · CISA · official · First report · CISA alert · Known exploited CVE
- Wed 12 AugDay 14
- CISA adds Cisco firewall heap flaw CVE-2026-20349 to KEV catalog00:17 · CISA · official · Known exploited CVE
- Cisco ASA/FTD flaw lets attackers crash firewalls, CVE-2026-2034902:32 · SecurityOnline · Known exploited CVE
- Cisco patches critical ASA/FTD zero day as attacks spike05:20 · SecurityWeek · Known exploited CVE · This article, 4th of 8
- CVE-2026-61515: Unauthenticated Command Injection in Puwell IP Cameras, PoC Exploit Code Publicly Disclosed13:32 · SecurityOnline · Known exploited CVE
- Thu 13 AugDay 21
- CISA Flags Critical Flaws in Metabase, Windows and Cisco Firewall17:21 · Security Affairs · Known exploited CVE
Quiet for 3 days
Mon 17 AugDay 61- Critical Metabase SQLi flaw lets attackers seize full admin control02:40 · SecurityOnline · Picked up again · Known exploited CVE
Quiet for 10 weeks
Thu 29 OctDay 791- Cisco fixes exploited VPN flaw that can crash firewalls10:30 · SecurityWeek · Picked up again · Known exploited CVE