Cisco ASA Software Vulnerabilities CVE-2026-20335 and CVE-2026-20336 Disclosed

• •Two high-risk vulnerabilities in Cisco ASA Software disclosed: CVE-2026-20335 and CVE-2026-20336.
• •Both vulnerabilities allow potential disruption of traffic and alteration of security policies.
• •Organizations with exposed management interfaces are at highest risk; prompt remediation is essential.

Cisco has disclosed two high-risk vulnerabilities in its Secure Adaptive Security Appliance Software, tracked as CVE-2026-20335 and CVE-2026-20336, both published on 2026-09-16. CVE-2026-20336 involves improper resource control, while CVE-2026-20335 relates to incorrect calculations. Both vulnerabilities could allow attackers to disrupt traffic, alter security policies, or gain access to sensitive management functions. Organizations with internet-facing firewalls or shared administration networks are particularly vulnerable. Current evidence shows no known exploitation of these vulnerabilities, but they require prompt remediation. Cisco recommends applying the fixed software release and restricting management access to mitigate risks. Monitoring for unusual activity on affected devices is also advised.