--- title: Cisco warns of ASA and FTD VPN flaw exploited to crash... description: Cisco has issued a warning about CVE-2026-20349, a high-severity (CVSS 8.6) denial-of-service vulnerability actively exploited in the wild. The flaw affects... canonical: https://daily.dev/posts/cisco-warns-of-asa-and-ftd-vpn-flaw-exploited-to-crash-devices-awbvdguob twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Cisco warns of ASA and FTD VPN flaw exploited to crash devices | daily.dev og:description: Cisco has issued a warning about CVE-2026-20349, a high-severity (CVSS 8.6) denial-of-service vulnerability actively exploited in the wild. The flaw affects... og:url: https://daily.dev/posts/cisco-warns-of-asa-and-ftd-vpn-flaw-exploited-to-crash-devices-awbvdguob og:image: https://api.daily.dev/og/posts/AWBvdGUOB.png og:image:alt: Cisco warns of ASA and FTD VPN flaw exploited to crash devices og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Cisco warns of ASA and FTD VPN flaw exploited to crash devices **[BleepingComputer](https://daily.dev/sources/bleepingcomputer)** · 2 min read · 0 upvotes · 0 comments ## Summary Cisco has issued a warning about CVE-2026-20349, a high-severity (CVSS 8.6) denial-of-service vulnerability actively exploited in the wild. The flaw affects Cisco Secure Firewall ASA and FTD software and can be triggered remotely without authentication by sending a crafted HTTP request to the Remote Access SSL VPN service, causing the device to reload. Vulnerable configurations include IKEv2 Remote Access VPN, SSL VPN, and Zero Trust Network Access on FTD. Cisco has released hot fixes for multiple ASA and FTD versions and strongly recommends upgrading, as no workarounds exist. Cisco's PSIRT confirmed active exploitation but has not disclosed attacker identity or targeted organizations. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What is CVE-2026-20349 and which Cisco products are affected? CVE-2026-20349 is a high-severity denial-of-service vulnerability with a CVSS score of 8.6 affecting Cisco Secure Firewall ASA and Threat Defense (FTD) software. It is caused by insufficient error checking when processing HTTP requests. An unauthenticated remote attacker can send a crafted HTTP request to the Remote Access SSL VPN service to crash the device. Vulnerable configurations include IKEv2 Remote Access VPN, SSL VPN, and Zero Trust Network Access on FTD. _Admins running Cisco firewall infrastructure track active CVE disclosures like this on daily.dev before attackers get there first._ ### Which Cisco ASA and FTD versions have patches for CVE-2026-20349? Hot fixes are available for Cisco ASA releases 9.16, 9.18, 9.20, 9.22, 9.23, and 9.24, and for FTD releases 7.0, 7.2, 7.4, 7.6, 7.7, and 10.0. There are no workarounds, so upgrading to a fixed release is the only remediation. Cisco Secure Firewall Management Center (FMC) software is not affected by this vulnerability. _Teams patching Cisco gear under active exploitation pressure find the latest advisories faster on daily.dev._ ## Similar posts on daily.dev - [Cisco faces Senate scrutiny over firewall flaws](https://daily.dev/posts/cisco-faces-senate-scrutiny-over-firewall-flaws-zegrtexnn) · The Register · 0 upvotes · 0 comments - [CISA warns federal agencies to patch flawed Cisco firewalls amid ‘active exploitation’ across the US government](https://daily.dev/posts/cisa-warns-federal-agencies-to-patch-flawed-cisco-firewalls-amid-active-exploitation-across-the-us-0rzkwm33k) · TechCrunch · 0 upvotes · 0 comments - [Critical Check Point VPN Zero-Day Exploited in the Wild \(CVE-2026-50751\)](https://daily.dev/posts/critical-check-point-vpn-zero-day-exploited-in-the-wild-cve-2026-50751--8lk5ari1g) · Rapid7 Cybersecurity Blog · 0 upvotes · 0 comments --- Tags: [#cyber](https://daily.dev/tags/cyber), [#security](https://daily.dev/tags/security), [#vpn](https://daily.dev/tags/vpn) [View this post on daily.dev](https://daily.dev/posts/cisco-warns-of-asa-and-ftd-vpn-flaw-exploited-to-crash-devices-awbvdguob) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Cisco warns of ASA and FTD VPN flaw exploited to crash devices","url":"https://daily.dev/posts/cisco-warns-of-asa-and-ftd-vpn-flaw-exploited-to-crash-devices-awbvdguob","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/cisco-warns-of-asa-and-ftd-vpn-flaw-exploited-to-crash-devices-awbvdguob"},"datePublished":"2026-08-11T19:47:05.582Z","dateModified":"2026-10-14T02:22:33.790Z","description":"Cisco has issued a warning about CVE-2026-20349, a high-severity (CVSS 8.6) denial-of-service vulnerability actively exploited in the wild. The flaw affects...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/bb3ca028e6217a145cf2058b8e86cf64?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/bb3ca028e6217a145cf2058b8e86cf64?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"BleepingComputer","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"BleepingComputer","logo":"https://media.daily.dev/image/upload/s--as8nJ3qy--/f_auto,q_auto/v1774959951/logos/bleepingcomputer?_a=BAMAMiWQ0","url":"https://daily.dev/sources/bleepingcomputer"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/cisco-warns-of-asa-and-ftd-vpn-flaw-exploited-to-crash-devices-awbvdguob","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"cyber,security,vpn","timeRequired":"PT2M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"BleepingComputer","item":"https://daily.dev/sources/bleepingcomputer"},{"@type":"ListItem","position":3,"name":"Cisco warns of ASA and FTD VPN flaw exploited to crash devices"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/cisco-warns-of-asa-and-ftd-vpn-flaw-exploited-to-crash-devices-awbvdguob#faq","mainEntity":[{"@type":"Question","name":"What is CVE-2026-20349 and which Cisco products are affected?","acceptedAnswer":{"@type":"Answer","text":"CVE-2026-20349 is a high-severity denial-of-service vulnerability with a CVSS score of 8.6 affecting Cisco Secure Firewall ASA and Threat Defense (FTD) software. It is caused by insufficient error checking when processing HTTP requests. An unauthenticated remote attacker can send a crafted HTTP request to the Remote Access SSL VPN service to crash the device. Vulnerable configurations include IKEv2 Remote Access VPN, SSL VPN, and Zero Trust Network Access on FTD. Admins running Cisco firewall infrastructure track active CVE disclosures like this on daily.dev before attackers get there first."}},{"@type":"Question","name":"Which Cisco ASA and FTD versions have patches for CVE-2026-20349?","acceptedAnswer":{"@type":"Answer","text":"Hot fixes are available for Cisco ASA releases 9.16, 9.18, 9.20, 9.22, 9.23, and 9.24, and for FTD releases 7.0, 7.2, 7.4, 7.6, 7.7, and 10.0. There are no workarounds, so upgrading to a fixed release is the only remediation. Cisco Secure Firewall Management Center (FMC) software is not affected by this vulnerability. Teams patching Cisco gear under active exploitation pressure find the latest advisories faster on daily.dev."}}]} ```