Skip to content
Sign in

Cisco product

Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense

Alert
No CISA KEV deadline is open. CISA last added a Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense CVE on 11 Aug.

Tracked since 11 Aug · latest article 17 Aug · RSS · API

0Open KEV deadlines

None open

1Added to KEV · 90 days

of 1 in the full CISA catalogue · all time

0High exploit odds · current

EPSS top 5%, not in KEV

0Articles · 7 days

none this week

Exploited, by due date1

Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense CVEs in CISA KEV with their federal deadlines. None is open.

Exploited Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense CVEs
CVEProductAddedFederal deadlineArticles
In CISA KEVCVE-2026-20349Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD)11 AugPassed 14 Aug7
Vendor CSV of 101 entries for CiscoAll 101 vendor entries, including other products.

Patch cadence and exploit odds

How often CISA adds Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense CVEs, how many have a fix, and where their exploit odds sit.

Added to CISA KEV per quarter

0Q1 ’250Q2 ’250Q3 ’250Q4 ’250Q1 ’260Q2 ’261Q3 ’260Q4 ’26
Show as table
Added to CISA KEV per quarter
QuarterAdded
Q1 20250
Q2 20250
Q3 20250
Q4 20250
Q1 20260
Q2 20260
Q3 20261
Q4 20260

Fix listed

1 of 1 CVE in coverage

Every CVE in coverage has a fix recorded.

EPSS percentile of each CVE

One dot per CVE; a red diamond marks those in CISA KEV.

top 5%CVE-2026-20349: 63th percentile, in CISA KEV050100
Show as table
FIRST EPSS percentiles across CVEs in coverage
CVEEPSS percentile
CVE-2026-2034963

Coverage7 articles · all time

The latest 7 articles naming Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense, in the shared story grammar.

Full timeline
Quiet for 10 weekslast report 17 Aug7 articles4 outlets

7 articles from 4 outlets since 11 Aug. Quiet since 17 Aug.

Now11 Aug131415161718First reportCISA · 11 Aug, 22:35Picked up againafter 3 days quiet
  • Tue 11 Aug, 22:35 UTC. CISA, first report. Cisco ASA/FTD heap bug lets remote attackers crash firewalls. Cites a CVE in CISA KEV.
  • Wed 12 Aug, 00:17 UTC. CISA. CISA adds Cisco firewall heap flaw CVE-2026-20349 to KEV catalog. Cites a CVE in CISA KEV.
  • Wed 12 Aug, 02:32 UTC. SecurityOnline, its first report on the story. Cisco ASA/FTD flaw lets attackers crash firewalls, CVE-2026-20349. Cites a CVE in CISA KEV.
  • Wed 12 Aug, 05:20 UTC. SecurityWeek, its first report on the story. Cisco patches critical ASA/FTD zero day as attacks spike. Cites a CVE in CISA KEV.
  • Wed 12 Aug, 13:32 UTC. SecurityOnline. CVE-2026-61515: Unauthenticated Command Injection in Puwell IP Cameras, PoC Exploit Code Publicly Disclosed. Cites a CVE in CISA KEV.
  • Thu 13 Aug, 17:21 UTC. Security Affairs, its first report on the story. CISA Flags Critical Flaws in Metabase, Windows and Cisco Firewall. Cites a CVE in CISA KEV.
  • Mon 17 Aug, 02:40 UTC. SecurityOnline. Critical Metabase SQLi flaw lets attackers seize full admin control. Cites a CVE in CISA KEV.
  • Known exploited CVE
  • No CVE
  • Larger: an outlet’s first report
  • Square: official source
  • Coverage over time
  • Quiet time, folded
Show all 7 articles as a list
  1. Tue 11 AugDay 01
    1. Cisco ASA/FTD heap bug lets remote attackers crash firewalls22:35 · CISA · official · First report · CISA alert · Known exploited CVE
  2. Wed 12 AugDay 14
    1. CISA adds Cisco firewall heap flaw CVE-2026-20349 to KEV catalog00:17 · CISA · official · Known exploited CVE
    2. Cisco ASA/FTD flaw lets attackers crash firewalls, CVE-2026-2034902:32 · SecurityOnline · Known exploited CVE
    3. Cisco patches critical ASA/FTD zero day as attacks spike05:20 · SecurityWeek · Known exploited CVE
    4. CVE-2026-61515: Unauthenticated Command Injection in Puwell IP Cameras, PoC Exploit Code Publicly Disclosed13:32 · SecurityOnline · Known exploited CVE
  3. Thu 13 AugDay 21
    1. CISA Flags Critical Flaws in Metabase, Windows and Cisco Firewall17:21 · Security Affairs · Known exploited CVE

  4. Quiet for 3 days

    Mon 17 AugDay 61
    1. Critical Metabase SQLi flaw lets attackers seize full admin control02:40 · SecurityOnline · Picked up again · Known exploited CVE

All CVEs in coverage1

Exploited first, then by EPSS

In the CVE tracker
  • CVE-2026-20349Exploited

    Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability

    8.6High1.0% EPSS · 7 articles
CyberSIXTSignal over noise
Updated AboutDevelopersSign in