CVE-2026-20120

Name of the Vulnerable Software and Affected Versions Cisco Secure Firewall Adaptive Security Appliance (ASA) Software (affected versions not specified) Cisco Secure Firewall Threat Defense (FTD) Software (affected versions not specified)

Description A logic error in the access control list (ACL) Object Group Search (OGS) implementation allows an unauthenticated remote attacker to bypass configured access controls. The issue occurs when populating group access control policies (ACPs) with OGS configured, enabling an attacker to send traffic through the device that should have been blocked to reach protected networks.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.