Critical severity9.9NVD Advisory· Published Sep 16, 2026· Updated Sep 18, 2026

CVE-2026-20332

Description

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure Firewall Management Center Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.

The vulnerabilities tracked by CVE-2026-20332 are related to improper access control issues that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-284.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Cisco Systems, Inc./Cisco Secure Firewall Management Center Softwareinferred2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)
Cisco Systems, Inc./Adaptive Security Appliance (ASA) Softwarellm-fuzzy
Cisco Systems, Inc./Cisco Secure Firewall Threat Defense Softwarellm-fuzzy

Patches

Vulnerability mechanics

References

sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-asaftdfmc-uvpPROhNnvd

News mentions

Cisco Fixes Dozens of Flaws Across FMC, ISE and Nexus Dashboard
SecurityWeek · Sep 17, 2026
Cisco Warns of New Zero-Day ISE Auth Bypass (CVSS 10.0) Exploited in Active Attacks
The Hacker News · Sep 17, 2026

cvss	0.643
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000