CVE-2026-20332 – Cisco Secure Firewall Adaptive Security Appliance (ASA) Software

Cisco has issued a software hardening release for Cisco Secure Firewall Adaptive Security Appliance (ASA) Software that fixes four Critical vulnerabilities found during an internal security review. The release also covers Cisco Secure Firewall Threat Defense Software and Cisco Secure Firewall Management Center Software. CVE-2026-20329 has a CVSS score of 9.9, Critical severity, and involves improper handling of exceptional conditions. CVE-2026-20330 has a CVSS score of 9.9, Critical severity, and involves improper neutralization. CVE-2026-20331 has a CVSS score of 9.6, Critical severity, and involves failed protection mechanisms. CVE-2026-20332 has a CVSS score of 9.9, Critical severity, and involves improper access control that enables elevation of privilege.

These flaws sit in the perimeter devices that guard the entire network, so a compromise there opens the door to everything behind them. Apply this update on a same-day basis to close all four Critical gaps.