Advisories
Critical Cisco Hardening Release: ASA, FTD, FMC Patch Internal Exploits
Cisco’s security team has rolled out a hardening update for its Secure Firewall Adaptive Security Appliance, Threat Defense, and Management Center software, addressing a suite of internally discovered flaws. Eight CVEs (CVE‑2026‑20329 through CVE‑2026‑20336) cover issues ranging from static credential exposure to authentication bypass, with two vulnerabilities already being actively exploited. No workarounds exist; customers must install the patches promptly to mitigate the critical risk.
Cisco’s internal security audit uncovered a cluster of weaknesses across its flagship firewall products. The findings, now bundled into a single hardening release, span the Adaptive Security Appliance (ASA), Threat Defense (FTD), and Management Center (FMC).
Eight CVE identifiers (CVE‑2026‑20329 to CVE‑2026‑20336) represent distinct Common Weakness Enumeration (CWE) classes. Two of these flaws are confirmed to be in the wild, enabling attackers to hijack credentials or bypass authentication controls.
Key Impact Areas
- Static credential leakage in FMC
- Authentication bypass across ASA and FTD
- Other critical code‑path vulnerabilities affecting configuration and management modules
Cisco has issued no interim workarounds; the only viable defense is to apply the latest firmware updates. The release carries a Critical severity rating, underscoring the urgency for all customers to act immediately.
"This hardening update is part of our commitment to proactive security and product quality," the Cisco engineering team said.
Related vulnerabilities
Cisco Hardens Secure Email Gateway with Critical Patch for Exploited SQL Injection
Cisco rolled out a hardening update for its Secure Email Gateway and Secure Email & Web Manager after an internal audit uncovered several critical flaws, including a live SQL injection exploit. The fix bundles five CVEs (CVE‑2026‑20353, 76440‑76443) into a single patch with no workarounds, demanding immediate action from customers to maintain email security.
Read briefing
Cisco Catalyst SD‑WAN Hardening Update: Critical Vulnerabilities Resolved (CVE‑2026‑20303‑20313)
Cisco’s SD‑WAN software team released a hardening patch in August 2026 after an internal audit uncovered several critical weaknesses. Five CVEs—CVE‑2026‑20303, ‑20304, ‑20310, ‑20312, ‑20313—were addressed through a single update per CWE class. No workarounds exist, so all Catalyst SD‑WAN customers should apply the new releases immediately to close the gaps.
Read briefing
Cisco IOS XE Hardening Release Addresses 7 Critical CVEs – August 2026
Cisco’s IOS XE team rolled out a hardening update in August 2026 that patches seven critical vulnerabilities discovered during internal testing. No workarounds exist; customers should apply the latest firmware to mitigate the risks. The CVEs span multiple CWE categories and carry a Critical impact rating.
Read briefing
Cisco Issues Critical Hardening Patch for Secure Workload – Five CVEs Resolved
Cisco's Secure Workload engineering team released a hardening update in August 2026 after an internal review uncovered five critical vulnerabilities. The patches address CVE‑2026‑20231, CVE‑2026‑20315, CVE‑2026‑20317, CVE‑2026‑20318, and CVE‑2026‑20319. No workarounds are available, so customers must apply the updates immediately.
Read briefing