Aha

Critical Vulnerabilities in Telnet and Cisco Firewalls Under Active Exploitation

First seen 27 Jan 2026, 19:53 UTC • Aha

•27.9

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

On January 19, 2026, a critical vulnerability in telnetd, CVE-2026-24061, was reported, allowing root access via Telnet. Additionally, two vulnerabilities in Cisco Secure Firewalls, CVE-2025-20333 and CVE-2025-20362, were identified, causing device reloads and denial of service. Healthcare providers and Cisco users are advised to take immediate action to mitigate these threats.

How this analysis works

Attack Flow

8 entities, 10 inferred relationships (STIX 2.1).

Technique (2)

Denial of Service
Zero-day Exploit

Vulnerability (4)

CVE-2025-20333
CVE-2025-20362
CVE-2026-24061
Telnet Authentication Bypass In Telnetd

Affected Platform (1)

Cisco Secure Firewall ASA

Tool (1)

Telnet

Relationships

Telnet exploits CVE-2025-20333
Telnet exploits CVE-2025-20362
Telnet exploits CVE-2026-24061
Telnet exploits Telnet Authentication Bypass In Telnetd
CVE-2025-20333 targets Cisco Secure Firewall ASA
CVE-2025-20362 targets Cisco Secure Firewall ASA
CVE-2026-24061 targets Cisco Secure Firewall ASA
Telnet Authentication Bypass In Telnetd targets Cisco Secure Firewall ASA
Denial of Service targets Cisco Secure Firewall ASA
Zero-day Exploit targets Cisco Secure Firewall ASA

Continue Reading

Lazarus Group Exploits Windows Zero-Day to Target Defense Sector Cisco Faces Multiple Critical Vulnerabilities in Unified CCX and Firewalls Cisco Firewalls Targeted by New Attack Variant Exploiting Critical Vulnerabilities

Critical Vulnerabilities in Telnet and Cisco Firewalls Under Active Exploitation

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading