CVE-2026-20349

Name of the Vulnerable Software and Affected Versions Cisco Secure Firewall Adaptive Security Appliance (ASA) (affected versions not specified) Cisco Secure Firewall Threat Defense (FTD) (affected versions not specified)

Description Insufficient error checking when processing HTTP requests in the Remote Access SSL VPN service allows an unauthenticated remote attacker to cause a device to reload unexpectedly. This results in a denial of service (DoS) condition, which is a state where a system becomes unavailable to its intended users. The issue is triggered by sending a crafted HTTP request to the service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.