🟠 High | Source: The Hacker News
A high-severity vulnerability (CVE-2026-20349) in Cisco’s ASA and FTD firewall software is being actively exploited in the wild, allowing unauthenticated remote attackers to crash the device via malformed HTTP requests. With a CVSS score of 8.6, the flaw requires no credentials to exploit, making it particularly dangerous for internet-facing firewall deployments. Organisations relying on these Cisco products for perimeter security should treat this as an urgent remediation priority.
Security Architect’s Take: Patch affected Cisco ASA and FTD devices immediately using Cisco’s published advisories, prioritising any instances exposed to untrusted networks or the internet. As an interim measure, restrict management and data-plane HTTP access to trusted IP ranges only, and review firewall access policies to limit attack surface whilst patches are applied.
Original advisory: Cisco ASA and FTD Flaw Exploited in the Wild Can Trigger Remote DoS