PatchTheCVECisco ASA vulnerabilities and fixes
CVEs that mention Cisco ASA, ranked by priority. 1 tracked.
Cisco ASA has 1 tracked vulnerability, 0 critical and 1 exploited in the wild (CISA KEV). A fixed release or vendor patch exists for 1. Most recent: 2026-08-11. Highest priority: CVE-2026-20349 (score 76/100).
- CVE-2026-20349 HIGH 8.6 EXPLOITED MITIGATE DOWNGRADE Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability
FAQ
How do I fix Cisco ASA vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is Cisco ASA being exploited right now?
Yes: 1 Cisco ASA CVE is on the CISA Known Exploited Vulnerabilities list, so patch it first.
Which Cisco ASA CVE should I patch first?
CVE-2026-20349 currently ranks highest (76/100): Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability.
Newest Cisco ASA CVEs
- CVE-2026-20349 HIGH 8.6 2026-08-11: Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense