/
← Voltar ao feed
critical

Cisco ASA, FTD and FMC hardening release fixes 8 CVEs, two FMC flaws actively exploited

1 fonte(s) · 1 atualização(ões) · publicado 18/09/2026 12:50 · coletado há 2 dias

Baseado só no resumo do feed. O site da fonte não liberou o texto completo para o Tifon, então esta análise saiu apenas do resumo publicado no feed e pode estar incompleta. Ela é atualizada quando outra fonte cobrir o assunto. Ler na fonte original ↗

Cisco published a September 2026 hardening release for Cisco Secure Firewall ASA, Secure Firewall Threat Defense (FTD) and Secure Firewall Management Center (FMC) software. It addresses multiple vulnerabilities found during an internal security review. Cisco rates the advisory Critical and states that two of the issues are known to be actively exploited. These are the FMC Static Credential Vulnerability and the FMC Authentication Bypass Vulnerability, each covered by a separate advisory. Cisco grouped the issues by CWE class and assigned one CVE to each group, for eight CVEs in total. No workarounds exist, so patching is the only mitigation.

Detalhes técnicos

  • CVEs: CVE-2026-20329 through CVE-2026-20336.
  • The article does not map individual CVEs to specific flaws, so it does not say which CVEs correspond to the exploited static credential and authentication bypass issues.
  • The article names no threat actor and gives no IOCs or exploitation details.
  • The advisory is part of the Cisco Advance Notification for the September 16, 2026 security advisories.

Remediação

  • Apply the Cisco software updates for ASA, FTD and FMC immediately. Prioritize FMC because of the confirmed active exploitation.
  • Cisco states that no workarounds are available.
  • Review the two linked FMC advisories (Static Credential and Authentication Bypass) and the full Cisco advisory bundle for fixed release details.

Linha do tempo

  1. sec.cloudapps.cisco.com ↗ · pub. 18/09/2026 12:50 · coletado 19/10 18:02 primeiro registro só resumo do feed

    Cisco ASA, FTD and FMC hardening release fixes 8 CVEs, two FMC flaws actively exploited

    ler a análise desta fonte

    Cisco published a September 2026 hardening release for Cisco Secure Firewall ASA, Secure Firewall Threat Defense (FTD) and Secure Firewall Management Center (FMC) software. It addresses multiple vulnerabilities found during an internal security review. Cisco rates the advisory Critical and states that two of the issues are known to be actively exploited. These are the FMC Static Credential Vulnerability and the FMC Authentication Bypass Vulnerability, each covered by a separate advisory. Cisco grouped the issues by CWE class and assigned one CVE to each group, for eight CVEs in total. No workarounds exist, so patching is the only mitigation.

    Technical Details

    • CVEs: CVE-2026-20329 through CVE-2026-20336.
    • The article does not map individual CVEs to specific flaws, so it does not say which CVEs correspond to the exploited static credential and authentication bypass issues.
    • The article names no threat actor and gives no IOCs or exploitation details.
    • The advisory is part of the Cisco Advance Notification for the September 16, 2026 security advisories.

    Remediation

    • Apply the Cisco software updates for ASA, FTD and FMC immediately. Prioritize FMC because of the confirmed active exploitation.
    • Cisco states that no workarounds are available.
    • Review the two linked FMC advisories (Static Credential and Authentication Bypass) and the full Cisco advisory bundle for fixed release details.