U.S. CISA adds CISCO Secure Firewall ASA and Secure FTD flaws to its Known Exploited Vulnerabilities catalog

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added vulnerabilities in CISCO Secure Firewall ASA and Secure FTD to its Known Exploited Vulnerabilities catalog. CISA warns of an ongoing exploitation campaign by an advanced threat actor targeting these devices, which involves zero-day vulnerabilities allowing unauthenticated remote code execution. Two specific vulnerabilities are highlighted: CVE-2025-20362 (missing authorization) and CVE-2025-20333 (buffer overflow).

CISA has mandated federal agencies to identify and mitigate these vulnerabilities by September 26, 2025, and to report any incidents. Private organizations are also advised to review and address these vulnerabilities.