Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2026-20003 (GCVE-0-2026-20003)
Vulnerability from cvelistv5 – Published: 2026-03-04 17:18 – Updated: 2026-03-04 21:41
VLAI?
EPSS
Summary
A vulnerability in the REST API of Cisco Secure FMC Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system.
This vulnerability is due to inadequate validation of user-supplied input. An attacker could exploit this vulnerability by sending crafted requests to an affected device. A successful exploit could allow the attacker to obtain read access to the database and read certain files on the underlying operating system. To exploit this vulnerability, the attacker would need valid user credentials with any of the following roles:
Administrator
Security approver
Intrusion admin
Access admin
Network admin
Severity ?
4.9 (Medium)
CWE
- CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Assigner
References
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| Cisco | Cisco Secure Firewall Management Center (FMC) |
Affected:
7.0.0
Affected: 7.0.0.1 Affected: 7.0.1 Affected: 7.0.1.1 Affected: 7.0.2 Affected: 7.0.2.1 Affected: 7.0.3 Affected: 7.0.4 Affected: 7.0.5 Affected: 7.0.6 Affected: 7.0.6.1 Affected: 7.0.6.2 Affected: 7.0.6.3 Affected: 7.0.7 Affected: 7.0.8 Affected: 7.0.8.1 Affected: 7.1.0 Affected: 7.1.0.1 Affected: 7.1.0.2 Affected: 7.1.0.3 Affected: 7.2.0 Affected: 7.2.1 Affected: 7.2.2 Affected: 7.2.0.1 Affected: 7.2.3 Affected: 7.2.3.1 Affected: 7.2.4 Affected: 7.2.4.1 Affected: 7.2.5 Affected: 7.2.5.1 Affected: 7.2.6 Affected: 7.2.7 Affected: 7.2.5.2 Affected: 7.2.8 Affected: 7.2.8.1 Affected: 7.2.9 Affected: 7.2.10 Affected: 7.2.10.2 Affected: 7.2.10.1 Affected: 7.3.0 Affected: 7.3.1 Affected: 7.3.1.1 Affected: 7.3.1.2 Affected: 7.4.0 Affected: 7.4.1 Affected: 7.4.1.1 Affected: 7.4.2 Affected: 7.4.2.1 Affected: 7.4.2.2 Affected: 7.4.2.3 Affected: 7.4.2.4 Affected: 7.4.3 Affected: 7.6.0 Affected: 7.6.1 Affected: 7.6.2 Affected: 7.6.2.1 Affected: 7.6.3 Affected: 7.7.0 Affected: 7.7.10 Affected: 7.7.10.1 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-20003",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-03-04T21:41:46.733443Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-03-04T21:41:52.586Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Cisco Secure Firewall Management Center (FMC)",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "7.0.0"
},
{
"status": "affected",
"version": "7.0.0.1"
},
{
"status": "affected",
"version": "7.0.1"
},
{
"status": "affected",
"version": "7.0.1.1"
},
{
"status": "affected",
"version": "7.0.2"
},
{
"status": "affected",
"version": "7.0.2.1"
},
{
"status": "affected",
"version": "7.0.3"
},
{
"status": "affected",
"version": "7.0.4"
},
{
"status": "affected",
"version": "7.0.5"
},
{
"status": "affected",
"version": "7.0.6"
},
{
"status": "affected",
"version": "7.0.6.1"
},
{
"status": "affected",
"version": "7.0.6.2"
},
{
"status": "affected",
"version": "7.0.6.3"
},
{
"status": "affected",
"version": "7.0.7"
},
{
"status": "affected",
"version": "7.0.8"
},
{
"status": "affected",
"version": "7.0.8.1"
},
{
"status": "affected",
"version": "7.1.0"
},
{
"status": "affected",
"version": "7.1.0.1"
},
{
"status": "affected",
"version": "7.1.0.2"
},
{
"status": "affected",
"version": "7.1.0.3"
},
{
"status": "affected",
"version": "7.2.0"
},
{
"status": "affected",
"version": "7.2.1"
},
{
"status": "affected",
"version": "7.2.2"
},
{
"status": "affected",
"version": "7.2.0.1"
},
{
"status": "affected",
"version": "7.2.3"
},
{
"status": "affected",
"version": "7.2.3.1"
},
{
"status": "affected",
"version": "7.2.4"
},
{
"status": "affected",
"version": "7.2.4.1"
},
{
"status": "affected",
"version": "7.2.5"
},
{
"status": "affected",
"version": "7.2.5.1"
},
{
"status": "affected",
"version": "7.2.6"
},
{
"status": "affected",
"version": "7.2.7"
},
{
"status": "affected",
"version": "7.2.5.2"
},
{
"status": "affected",
"version": "7.2.8"
},
{
"status": "affected",
"version": "7.2.8.1"
},
{
"status": "affected",
"version": "7.2.9"
},
{
"status": "affected",
"version": "7.2.10"
},
{
"status": "affected",
"version": "7.2.10.2"
},
{
"status": "affected",
"version": "7.2.10.1"
},
{
"status": "affected",
"version": "7.3.0"
},
{
"status": "affected",
"version": "7.3.1"
},
{
"status": "affected",
"version": "7.3.1.1"
},
{
"status": "affected",
"version": "7.3.1.2"
},
{
"status": "affected",
"version": "7.4.0"
},
{
"status": "affected",
"version": "7.4.1"
},
{
"status": "affected",
"version": "7.4.1.1"
},
{
"status": "affected",
"version": "7.4.2"
},
{
"status": "affected",
"version": "7.4.2.1"
},
{
"status": "affected",
"version": "7.4.2.2"
},
{
"status": "affected",
"version": "7.4.2.3"
},
{
"status": "affected",
"version": "7.4.2.4"
},
{
"status": "affected",
"version": "7.4.3"
},
{
"status": "affected",
"version": "7.6.0"
},
{
"status": "affected",
"version": "7.6.1"
},
{
"status": "affected",
"version": "7.6.2"
},
{
"status": "affected",
"version": "7.6.2.1"
},
{
"status": "affected",
"version": "7.6.3"
},
{
"status": "affected",
"version": "7.7.0"
},
{
"status": "affected",
"version": "7.7.10"
},
{
"status": "affected",
"version": "7.7.10.1"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the REST API of Cisco Secure FMC Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system.\r\n\r This vulnerability is due to inadequate validation of user-supplied input. An attacker could exploit this vulnerability by sending crafted requests to an affected device. A successful exploit could allow the attacker to obtain read access to the database and read certain files on the underlying operating system. To exploit this vulnerability, the attacker would need valid user credentials with any of the following roles:\r\n\r \r Administrator\r Security approver\r Intrusion admin\r Access admin\r Network admin"
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-89",
"description": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-03-04T17:18:39.650Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-fmc-sql-injection-2qH6CcJd",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-sql-injection-2qH6CcJd"
}
],
"source": {
"advisory": "cisco-sa-fmc-sql-injection-2qH6CcJd",
"defects": [
"CSCwp22451"
],
"discovery": "INTERNAL"
}
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2026-20003",
"datePublished": "2026-03-04T17:18:39.650Z",
"dateReserved": "2025-10-08T11:59:15.349Z",
"dateUpdated": "2026-03-04T21:41:52.586Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"nvd": "{\"cve\":{\"id\":\"CVE-2026-20003\",\"sourceIdentifier\":\"psirt@cisco.com\",\"published\":\"2026-03-04T18:16:12.840\",\"lastModified\":\"2026-03-05T19:39:11.967\",\"vulnStatus\":\"Awaiting Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"A vulnerability in the REST API of Cisco Secure FMC Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system.\\r\\n\\r This vulnerability is due to inadequate validation of user-supplied input. An attacker could exploit this vulnerability by sending crafted requests to an affected device. A successful exploit could allow the attacker to obtain read access to the database and read certain files on the underlying operating system. To exploit this vulnerability, the attacker would need valid user credentials with any of the following roles:\\r\\n\\r \\r Administrator\\r Security approver\\r Intrusion admin\\r Access admin\\r Network admin\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"psirt@cisco.com\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N\",\"baseScore\":4.9,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"HIGH\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":1.2,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"psirt@cisco.com\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-89\"}]}],\"references\":[{\"url\":\"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-sql-injection-2qH6CcJd\",\"source\":\"psirt@cisco.com\"}]}}",
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-20003\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-03-04T21:41:46.733443Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-03-04T21:41:49.382Z\"}}], \"cna\": {\"source\": {\"defects\": [\"CSCwp22451\"], \"advisory\": \"cisco-sa-fmc-sql-injection-2qH6CcJd\", \"discovery\": \"INTERNAL\"}, \"metrics\": [{\"format\": \"cvssV3_1\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 4.9, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"NONE\", \"privilegesRequired\": \"HIGH\", \"confidentialityImpact\": \"HIGH\"}}], \"affected\": [{\"vendor\": \"Cisco\", \"product\": \"Cisco Secure Firewall Management Center (FMC)\", \"versions\": [{\"status\": \"affected\", \"version\": \"7.0.0\"}, {\"status\": \"affected\", \"version\": \"7.0.0.1\"}, {\"status\": \"affected\", \"version\": \"7.0.1\"}, {\"status\": \"affected\", \"version\": \"7.0.1.1\"}, {\"status\": \"affected\", \"version\": \"7.0.2\"}, {\"status\": \"affected\", \"version\": \"7.0.2.1\"}, {\"status\": \"affected\", \"version\": \"7.0.3\"}, {\"status\": \"affected\", \"version\": \"7.0.4\"}, {\"status\": \"affected\", \"version\": \"7.0.5\"}, {\"status\": \"affected\", \"version\": \"7.0.6\"}, {\"status\": \"affected\", \"version\": \"7.0.6.1\"}, {\"status\": \"affected\", \"version\": \"7.0.6.2\"}, {\"status\": \"affected\", \"version\": \"7.0.6.3\"}, {\"status\": \"affected\", \"version\": \"7.0.7\"}, {\"status\": \"affected\", \"version\": \"7.0.8\"}, {\"status\": \"affected\", \"version\": \"7.0.8.1\"}, {\"status\": \"affected\", \"version\": \"7.1.0\"}, {\"status\": \"affected\", \"version\": \"7.1.0.1\"}, {\"status\": \"affected\", \"version\": \"7.1.0.2\"}, {\"status\": \"affected\", \"version\": \"7.1.0.3\"}, {\"status\": \"affected\", \"version\": \"7.2.0\"}, {\"status\": \"affected\", \"version\": \"7.2.1\"}, {\"status\": \"affected\", \"version\": \"7.2.2\"}, {\"status\": \"affected\", \"version\": \"7.2.0.1\"}, {\"status\": \"affected\", \"version\": \"7.2.3\"}, {\"status\": \"affected\", \"version\": \"7.2.3.1\"}, {\"status\": \"affected\", \"version\": \"7.2.4\"}, {\"status\": \"affected\", \"version\": \"7.2.4.1\"}, {\"status\": \"affected\", \"version\": \"7.2.5\"}, {\"status\": \"affected\", \"version\": \"7.2.5.1\"}, {\"status\": \"affected\", \"version\": \"7.2.6\"}, {\"status\": \"affected\", \"version\": \"7.2.7\"}, {\"status\": \"affected\", \"version\": \"7.2.5.2\"}, {\"status\": \"affected\", \"version\": \"7.2.8\"}, {\"status\": \"affected\", \"version\": \"7.2.8.1\"}, {\"status\": \"affected\", \"version\": \"7.2.9\"}, {\"status\": \"affected\", \"version\": \"7.2.10\"}, {\"status\": \"affected\", \"version\": \"7.2.10.2\"}, {\"status\": \"affected\", \"version\": \"7.2.10.1\"}, {\"status\": \"affected\", \"version\": \"7.3.0\"}, {\"status\": \"affected\", \"version\": \"7.3.1\"}, {\"status\": \"affected\", \"version\": \"7.3.1.1\"}, {\"status\": \"affected\", \"version\": \"7.3.1.2\"}, {\"status\": \"affected\", \"version\": \"7.4.0\"}, {\"status\": \"affected\", \"version\": \"7.4.1\"}, {\"status\": \"affected\", \"version\": \"7.4.1.1\"}, {\"status\": \"affected\", \"version\": \"7.4.2\"}, {\"status\": \"affected\", \"version\": \"7.4.2.1\"}, {\"status\": \"affected\", \"version\": \"7.4.2.2\"}, {\"status\": \"affected\", \"version\": \"7.4.2.3\"}, {\"status\": \"affected\", \"version\": \"7.4.2.4\"}, {\"status\": \"affected\", \"version\": \"7.4.3\"}, {\"status\": \"affected\", \"version\": \"7.6.0\"}, {\"status\": \"affected\", \"version\": \"7.6.1\"}, {\"status\": \"affected\", \"version\": \"7.6.2\"}, {\"status\": \"affected\", \"version\": \"7.6.2.1\"}, {\"status\": \"affected\", \"version\": \"7.6.3\"}, {\"status\": \"affected\", \"version\": \"7.7.0\"}, {\"status\": \"affected\", \"version\": \"7.7.10\"}, {\"status\": \"affected\", \"version\": \"7.7.10.1\"}]}], \"exploits\": [{\"lang\": \"en\", \"value\": \"The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory.\"}], \"references\": [{\"url\": \"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-sql-injection-2qH6CcJd\", \"name\": \"cisco-sa-fmc-sql-injection-2qH6CcJd\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"A vulnerability in the REST API of Cisco Secure FMC Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system.\\r\\n\\r This vulnerability is due to inadequate validation of user-supplied input. An attacker could exploit this vulnerability by sending crafted requests to an affected device. A successful exploit could allow the attacker to obtain read access to the database and read certain files on the underlying operating system. To exploit this vulnerability, the attacker would need valid user credentials with any of the following roles:\\r\\n\\r \\r Administrator\\r Security approver\\r Intrusion admin\\r Access admin\\r Network admin\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"cwe\", \"cweId\": \"CWE-89\", \"description\": \"Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)\"}]}], \"providerMetadata\": {\"orgId\": \"d1c1063e-7a18-46af-9102-31f8928bc633\", \"shortName\": \"cisco\", \"dateUpdated\": \"2026-03-04T17:18:39.650Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2026-20003\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-03-04T21:41:52.586Z\", \"dateReserved\": \"2025-10-08T11:59:15.349Z\", \"assignerOrgId\": \"d1c1063e-7a18-46af-9102-31f8928bc633\", \"datePublished\": \"2026-03-04T17:18:39.650Z\", \"assignerShortName\": \"cisco\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
NCSC-2026-0077
Vulnerability from csaf_ncscnl - Published: 2026-03-05 09:05 - Updated: 2026-03-05 09:05Summary
Kwetsbaarheden verholpen in Cisco Secure Firewall systemen
Notes
The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:
NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.
NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.
This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings.
Feiten
Cisco heeft meerdere kwetsbaarheden verholpen in Cisco Secure Firewall (inclusief ASA en FTD software).
Interpretaties
De kwetsbaarheden omvatten SQL-injectie, privilege-escalatie, denial-of-service, cross-site scripting, en onjuist beheer van invoer in verschillende componenten van de Cisco Secure Firewall. Authenticated remote attackers kunnen deze kwetsbaarheden misbruiken om ongeautoriseerde toegang te krijgen, systeemintegriteit te compromitteren, of netwerkdiensten te verstoren. De kwetsbaarheden zijn aanwezig in de webinterfaces, REST API's, en andere functionaliteiten van de firewall software.
Oplossingen
Cisco heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.
Kans
medium
Schade
high
CWE-20
Improper Input Validation
CWE-27
Path Traversal: 'dir/../../filename'
CWE-77
Improper Neutralization of Special Elements used in a Command ('Command Injection')
CWE-78
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-80
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
CWE-88
Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
CWE-131
Incorrect Calculation of Buffer Size
CWE-138
Improper Neutralization of Special Elements
CWE-190
Integer Overflow or Wraparound
CWE-244
Improper Clearing of Heap Memory Before Release ('Heap Inspection')
CWE-248
Uncaught Exception
CWE-250
Execution with Unnecessary Privileges
CWE-269
Improper Privilege Management
CWE-279
Incorrect Execution-Assigned Permissions
CWE-284
Improper Access Control
CWE-330
Use of Insufficiently Random Values
CWE-388
CWE-388
CWE-401
Missing Release of Memory after Effective Lifetime
CWE-404
Improper Resource Shutdown or Release
CWE-444
Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')
CWE-476
NULL Pointer Dereference
CWE-770
Allocation of Resources Without Limits or Throttling
CWE-772
Missing Release of Resource after Effective Lifetime
CWE-787
Out-of-bounds Write
CWE-788
Access of Memory Location After End of Buffer
CWE-823
Use of Out-of-range Pointer Offset
{
"document": {
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE"
}
},
"lang": "nl",
"notes": [
{
"category": "legal_disclaimer",
"text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
},
{
"category": "description",
"text": "Cisco heeft meerdere kwetsbaarheden verholpen in Cisco Secure Firewall (inclusief ASA en FTD software).",
"title": "Feiten"
},
{
"category": "description",
"text": "De kwetsbaarheden omvatten SQL-injectie, privilege-escalatie, denial-of-service, cross-site scripting, en onjuist beheer van invoer in verschillende componenten van de Cisco Secure Firewall. Authenticated remote attackers kunnen deze kwetsbaarheden misbruiken om ongeautoriseerde toegang te krijgen, systeemintegriteit te compromitteren, of netwerkdiensten te verstoren. De kwetsbaarheden zijn aanwezig in de webinterfaces, REST API\u0027s, en andere functionaliteiten van de firewall software.",
"title": "Interpretaties"
},
{
"category": "description",
"text": "Cisco heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.",
"title": "Oplossingen"
},
{
"category": "general",
"text": "medium",
"title": "Kans"
},
{
"category": "general",
"text": "high",
"title": "Schade"
},
{
"category": "general",
"text": "Improper Input Validation",
"title": "CWE-20"
},
{
"category": "general",
"text": "Path Traversal: \u0027dir/../../filename\u0027",
"title": "CWE-27"
},
{
"category": "general",
"text": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)",
"title": "CWE-77"
},
{
"category": "general",
"text": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
"title": "CWE-78"
},
{
"category": "general",
"text": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
"title": "CWE-79"
},
{
"category": "general",
"text": "Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)",
"title": "CWE-80"
},
{
"category": "general",
"text": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)",
"title": "CWE-88"
},
{
"category": "general",
"text": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)",
"title": "CWE-89"
},
{
"category": "general",
"text": "Improper Restriction of Operations within the Bounds of a Memory Buffer",
"title": "CWE-119"
},
{
"category": "general",
"text": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
"title": "CWE-120"
},
{
"category": "general",
"text": "Incorrect Calculation of Buffer Size",
"title": "CWE-131"
},
{
"category": "general",
"text": "Improper Neutralization of Special Elements",
"title": "CWE-138"
},
{
"category": "general",
"text": "Integer Overflow or Wraparound",
"title": "CWE-190"
},
{
"category": "general",
"text": "Improper Clearing of Heap Memory Before Release (\u0027Heap Inspection\u0027)",
"title": "CWE-244"
},
{
"category": "general",
"text": "Uncaught Exception",
"title": "CWE-248"
},
{
"category": "general",
"text": "Execution with Unnecessary Privileges",
"title": "CWE-250"
},
{
"category": "general",
"text": "Improper Privilege Management",
"title": "CWE-269"
},
{
"category": "general",
"text": "Incorrect Execution-Assigned Permissions",
"title": "CWE-279"
},
{
"category": "general",
"text": "Improper Access Control",
"title": "CWE-284"
},
{
"category": "general",
"text": "Use of Insufficiently Random Values",
"title": "CWE-330"
},
{
"category": "general",
"text": "CWE-388",
"title": "CWE-388"
},
{
"category": "general",
"text": "Missing Release of Memory after Effective Lifetime",
"title": "CWE-401"
},
{
"category": "general",
"text": "Improper Resource Shutdown or Release",
"title": "CWE-404"
},
{
"category": "general",
"text": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)",
"title": "CWE-444"
},
{
"category": "general",
"text": "NULL Pointer Dereference",
"title": "CWE-476"
},
{
"category": "general",
"text": "Allocation of Resources Without Limits or Throttling",
"title": "CWE-770"
},
{
"category": "general",
"text": "Missing Release of Resource after Effective Lifetime",
"title": "CWE-772"
},
{
"category": "general",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "general",
"text": "Access of Memory Location After End of Buffer",
"title": "CWE-788"
},
{
"category": "general",
"text": "Use of Out-of-range Pointer Offset",
"title": "CWE-823"
}
],
"publisher": {
"category": "coordinator",
"contact_details": "cert@ncsc.nl",
"name": "Nationaal Cyber Security Centrum",
"namespace": "https://www.ncsc.nl/"
},
"references": [
{
"category": "external",
"summary": "Reference",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-dos-FCvLD6vR"
},
{
"category": "external",
"summary": "Reference",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-scpcxt-filecpy-rgeP73nE"
},
{
"category": "external",
"summary": "Reference",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-ssh-keybypass-cr5xPUSf"
},
{
"category": "external",
"summary": "Reference",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-aclbypass-dos-CVxVRSvQ"
},
{
"category": "external",
"summary": "Reference",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-cmd-inj-ZJV8Wysm"
},
{
"category": "external",
"summary": "Reference",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-desync-n5AVzEQw"
},
{
"category": "external",
"summary": "Reference",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-esp-dos-uv7yD8P5"
},
{
"category": "external",
"summary": "Reference",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-ikev2-dos-eBueGdEG"
},
{
"category": "external",
"summary": "Reference",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-luainject-VescqgmS"
},
{
"category": "external",
"summary": "Reference",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-ospf-ZH8PhbSW"
},
{
"category": "external",
"summary": "Reference",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-saml-LktTrwZP"
},
{
"category": "external",
"summary": "Reference",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-vpn-dos-SpOFF2Re"
},
{
"category": "external",
"summary": "Reference",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-vpn-m9sx6MbC"
},
{
"category": "external",
"summary": "Reference",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-webvpn-xss-uwjc4HR"
},
{
"category": "external",
"summary": "Reference",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-css-Fn4QSZ"
},
{
"category": "external",
"summary": "Reference",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-cmd-inject-S9ZM4EJf"
},
{
"category": "external",
"summary": "Reference",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-rce-NKhnULJh"
},
{
"category": "external",
"summary": "Reference",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-sql-inject-2EnmTC8v"
},
{
"category": "external",
"summary": "Reference",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-sql-injection-2qH6CcJd"
},
{
"category": "external",
"summary": "Reference",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-cmd-inj-mTzGZexf"
},
{
"category": "external",
"summary": "Reference",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-dnd-dos-bpEcg7B7"
},
{
"category": "external",
"summary": "Reference",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-snort-bypass-rLggKzVF"
},
{
"category": "external",
"summary": "Reference",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-snort3ssl-FBEKYXpH"
},
{
"category": "external",
"summary": "Reference",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-tcp-dos-rHfqnwRg"
},
{
"category": "external",
"summary": "Reference",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftdfmc-dir-trav-wERgjhWq"
},
{
"category": "external",
"summary": "Reference",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-onprem-fmc-authbypass-5JPp45V2"
}
],
"title": "Kwetsbaarheden verholpen in Cisco Secure Firewall systemen",
"tracking": {
"current_release_date": "2026-03-05T09:05:21.646499Z",
"generator": {
"date": "2025-08-04T16:30:00Z",
"engine": {
"name": "V.A.",
"version": "1.3"
}
},
"id": "NCSC-2026-0077",
"initial_release_date": "2026-03-05T09:05:21.646499Z",
"revision_history": [
{
"date": "2026-03-05T09:05:21.646499Z",
"number": "1.0.0",
"summary": "Initiele versie"
}
],
"status": "final",
"version": "1.0.0"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-1"
}
}
],
"category": "product_name",
"name": "Adaptive Security Appliance"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-2"
}
}
],
"category": "product_name",
"name": "Cisco 3000 Series Industrial Security Appliances (ISA)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-3"
}
}
],
"category": "product_name",
"name": "Cisco ASA 5500-X Series Firewalls"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-4"
}
}
],
"category": "product_name",
"name": "Cisco Adaptive Security Virtual Appliance (ASAv)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-5"
}
}
],
"category": "product_name",
"name": "Cisco Firepower 1000 Series"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-6"
}
}
],
"category": "product_name",
"name": "Cisco Firepower 2100 Series"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-7"
}
}
],
"category": "product_name",
"name": "Cisco Firepower 9000 Series"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-8"
}
}
],
"category": "product_name",
"name": "Cisco Secure Endpoint"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-9"
}
}
],
"category": "product_name",
"name": "Cisco Secure Firewall 3100 Series"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-10"
}
}
],
"category": "product_name",
"name": "Cisco Secure Firewall 4200 Series"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-11"
}
}
],
"category": "product_name",
"name": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-12"
}
}
],
"category": "product_name",
"name": "Cisco Secure Firewall Management Center"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-13"
}
}
],
"category": "product_name",
"name": "Cisco Secure Firewall Management Center (FMC)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-14"
}
}
],
"category": "product_name",
"name": "Cisco Secure Firewall Management Center (FMC) Appliances"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-15"
}
}
],
"category": "product_name",
"name": "Cisco Secure Firewall Threat Defense (FTD) Software"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-16"
}
}
],
"category": "product_name",
"name": "Firepower Management Center"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-17"
}
}
],
"category": "product_name",
"name": "Firepower Threat Defense"
}
],
"category": "vendor",
"name": "Cisco"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-20340",
"cwe": {
"id": "CWE-89",
"name": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)",
"title": "CWE-89"
},
{
"category": "description",
"text": "Multiple vulnerabilities in Cisco products, including an SQL injection flaw in Cisco Secure Firewall Management Center, allow authenticated users or remote attackers to perform actions such as SQL injection, denial of service, privilege escalation, remote code execution, and information disclosure.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-20340 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2024/cve-2024-20340.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2024-20340"
},
{
"cve": "CVE-2024-20358",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
"title": "CWE-78"
},
{
"category": "description",
"text": "A vulnerability in Cisco ASA and Firepower Threat Defense restore functionality allows an authenticated local attacker with administrator privileges to execute arbitrary root-level commands by restoring a crafted backup file due to improper sanitization.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-20358 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2024/cve-2024-20358.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.0,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2024-20358"
},
{
"cve": "CVE-2026-20101",
"cwe": {
"id": "CWE-330",
"name": "Use of Insufficiently Random Values"
},
"notes": [
{
"category": "other",
"text": "Use of Insufficiently Random Values",
"title": "CWE-330"
},
{
"category": "other",
"text": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
"title": "CWE-120"
},
{
"category": "other",
"text": "Missing Release of Memory after Effective Lifetime",
"title": "CWE-401"
},
{
"category": "other",
"text": "Allocation of Resources Without Limits or Throttling",
"title": "CWE-770"
},
{
"category": "description",
"text": "Multiple vulnerabilities in Cisco Secure Firewall ASA and FTD Software, including in the SAML 2.0 SSO and Remote Access SSL VPN features, allow unauthenticated remote attackers to cause device reloads and denial of service via crafted messages.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20101 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20101.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20101"
},
{
"cve": "CVE-2026-20020",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "other",
"text": "Improper Input Validation",
"title": "CWE-20"
},
{
"category": "description",
"text": "A vulnerability in Cisco Secure Firewall ASA and FTD Software\u0027s OSPF protocol allows an unauthenticated adjacent attacker to cause device reload and denial of service by sending crafted OSPF update packets, requiring the secret key if OSPF authentication is enabled.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20020 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20020.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20020"
},
{
"cve": "CVE-2026-20073",
"cwe": {
"id": "CWE-284",
"name": "Improper Access Control"
},
"notes": [
{
"category": "other",
"text": "Improper Access Control",
"title": "CWE-284"
},
{
"category": "description",
"text": "A vulnerability in Cisco Secure Firewall ASA and FTD software allows unauthenticated remote attackers to bypass access controls by exploiting improper error handling during memory exhaustion in cluster replication, enabling unauthorized network traffic.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20073 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20073.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20073"
},
{
"cve": "CVE-2026-20007",
"cwe": {
"id": "CWE-284",
"name": "Improper Access Control"
},
"notes": [
{
"category": "other",
"text": "Improper Access Control",
"title": "CWE-284"
},
{
"category": "description",
"text": "A logic error in Snort 2 and Snort 3 deep packet inspection of Cisco Secure Firewall Threat Defense Software allows unauthenticated remote attackers to bypass Snort rules and send unauthorized network traffic.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20007 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20007.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20007"
},
{
"cve": "CVE-2026-20018",
"cwe": {
"id": "CWE-27",
"name": "Path Traversal: \u0027dir/../../filename\u0027"
},
"notes": [
{
"category": "other",
"text": "Path Traversal: \u0027dir/../../filename\u0027",
"title": "CWE-27"
},
{
"category": "description",
"text": "A vulnerability in the sftunnel functionality of Cisco Secure Firewall Management Center and Threat Defense Software allows an authenticated remote attacker with admin privileges to write arbitrary root files on the operating system by exploiting insufficient directory path validation during file synchronization.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20018 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20018.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20018"
},
{
"cve": "CVE-2026-20002",
"cwe": {
"id": "CWE-89",
"name": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)",
"title": "CWE-89"
},
{
"category": "description",
"text": "Multiple SQL injection vulnerabilities in Cisco Secure FMC Software and Cisco Secure Firewall Management Center\u0027s web interfaces and REST APIs allow authenticated remote attackers to access databases and certain OS files.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20002 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20002.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20002"
},
{
"cve": "CVE-2026-20015",
"cwe": {
"id": "CWE-401",
"name": "Missing Release of Memory after Effective Lifetime"
},
"notes": [
{
"category": "other",
"text": "Missing Release of Memory after Effective Lifetime",
"title": "CWE-401"
},
{
"category": "description",
"text": "A memory leak vulnerability in the IKEv2 feature of Cisco Secure Firewall ASA and FTD Software allows unauthenticated remote attackers to cause a denial-of-service condition, disrupting network availability and requiring manual device reload.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20015 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20015.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20015"
},
{
"cve": "CVE-2026-20062",
"cwe": {
"id": "CWE-279",
"name": "Incorrect Execution-Assigned Permissions"
},
"notes": [
{
"category": "other",
"text": "Incorrect Execution-Assigned Permissions",
"title": "CWE-279"
},
{
"category": "description",
"text": "A vulnerability in Cisco Secure Firewall ASA Software\u0027s CLI allows an authenticated admin user in one context to copy files, including sensitive configurations, to or from another context due to improper SCP access controls requiring valid credentials and exact file paths.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20062 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20062.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.2,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20062"
},
{
"cve": "CVE-2026-20031",
"cwe": {
"id": "CWE-248",
"name": "Uncaught Exception"
},
"notes": [
{
"category": "other",
"text": "Uncaught Exception",
"title": "CWE-248"
},
{
"category": "description",
"text": "A vulnerability in ClamAV\u0027s CSS module allows unauthenticated remote attackers to cause a denial of service by exploiting improper UTF-8 string error handling.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20031 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20031.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20031"
},
{
"cve": "CVE-2026-20039",
"cwe": {
"id": "CWE-244",
"name": "Improper Clearing of Heap Memory Before Release (\u0027Heap Inspection\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Clearing of Heap Memory Before Release (\u0027Heap Inspection\u0027)",
"title": "CWE-244"
},
{
"category": "description",
"text": "A vulnerability in Cisco Secure Firewall ASA and FTD VPN web server allows unauthenticated remote attackers to cause denial of service by sending crafted HTTP requests, resulting in device reloads.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20039 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20039.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20039"
},
{
"cve": "CVE-2026-20022",
"cwe": {
"id": "CWE-823",
"name": "Use of Out-of-range Pointer Offset"
},
"notes": [
{
"category": "other",
"text": "Use of Out-of-range Pointer Offset",
"title": "CWE-823"
},
{
"category": "description",
"text": "A vulnerability in Cisco Secure Firewall ASA and FTD Software\u0027s OSPF protocol allows an unauthenticated adjacent attacker to cause device reloads and denial of service when OSPF canonicalization debug is enabled due to insufficient input validation of OSPF LSU packets.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20022 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20022.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20022"
},
{
"cve": "CVE-2026-20050",
"cwe": {
"id": "CWE-404",
"name": "Improper Resource Shutdown or Release"
},
"notes": [
{
"category": "other",
"text": "Improper Resource Shutdown or Release",
"title": "CWE-404"
},
{
"category": "description",
"text": "A vulnerability in Cisco Secure Firewall Threat Defense Software\u0027s Do Not Decrypt exclusion feature allows an unauthenticated remote attacker to cause denial of service by sending crafted TLS 1.2 encrypted traffic, resulting in device reloads.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20050 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20050.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20050"
},
{
"cve": "CVE-2026-20069",
"cwe": {
"id": "CWE-444",
"name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
},
"notes": [
{
"category": "other",
"text": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)",
"title": "CWE-444"
},
{
"category": "description",
"text": "A vulnerability in Cisco Secure Firewall ASA and FTD VPN web services enables unauthenticated remote attackers to conduct browser-based cross-site scripting attacks by exploiting improper HTTP request validation.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20069 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20069.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20069"
},
{
"cve": "CVE-2026-20009",
"cwe": {
"id": "CWE-138",
"name": "Improper Neutralization of Special Elements"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Special Elements",
"title": "CWE-138"
},
{
"category": "description",
"text": "A vulnerability in Cisco Secure Firewall ASA\u0027s SSH key-based authentication allows an unauthenticated remote attacker with a valid username and public key to log in and execute commands as that user without the private key, excluding root access.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20009 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20009.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20009"
},
{
"cve": "CVE-2026-20014",
"cwe": {
"id": "CWE-401",
"name": "Missing Release of Memory after Effective Lifetime"
},
"notes": [
{
"category": "other",
"text": "Missing Release of Memory after Effective Lifetime",
"title": "CWE-401"
},
{
"category": "description",
"text": "A vulnerability in Cisco Secure Firewall ASA and FTD Software\u0027s IKEv2 feature allows authenticated remote attackers with valid VPN credentials to cause denial-of-service by sending crafted packets that may exhaust memory and trigger device reloads.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20014 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20014.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20014"
},
{
"cve": "CVE-2026-20016",
"cwe": {
"id": "CWE-250",
"name": "Execution with Unnecessary Privileges"
},
"notes": [
{
"category": "other",
"text": "Execution with Unnecessary Privileges",
"title": "CWE-250"
},
{
"category": "other",
"text": "NULL Pointer Dereference",
"title": "CWE-476"
},
{
"category": "other",
"text": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)",
"title": "CWE-88"
},
{
"category": "description",
"text": "Multiple vulnerabilities in Cisco FXOS, Secure Firewall ASA, and FTD Software CLI features allow authenticated local attackers with administrative credentials to execute arbitrary commands with root or elevated privileges or cause device reloads due to insufficient input validation.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20016 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20016.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.0,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20016"
},
{
"cve": "CVE-2026-20021",
"cwe": {
"id": "CWE-401",
"name": "Missing Release of Memory after Effective Lifetime"
},
"notes": [
{
"category": "other",
"text": "Missing Release of Memory after Effective Lifetime",
"title": "CWE-401"
},
{
"category": "description",
"text": "A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA and FTD software allows an authenticated, adjacent attacker to send crafted packets that exhaust device memory, causing a denial of service.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20021 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20021.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20021"
},
{
"cve": "CVE-2026-20049",
"cwe": {
"id": "CWE-131",
"name": "Incorrect Calculation of Buffer Size"
},
"notes": [
{
"category": "other",
"text": "Incorrect Calculation of Buffer Size",
"title": "CWE-131"
},
{
"category": "description",
"text": "A vulnerability in Cisco Secure Firewall ASA and FTD software\u0027s handling of GCM-encrypted IKEv2 IPsec traffic allows an authenticated attacker with VPN credentials to cause a denial of service by triggering an unexpected device reload due to insufficient memory allocation.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20049 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20049.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20049"
},
{
"cve": "CVE-2026-20105",
"cwe": {
"id": "CWE-401",
"name": "Missing Release of Memory after Effective Lifetime"
},
"notes": [
{
"category": "other",
"text": "Missing Release of Memory after Effective Lifetime",
"title": "CWE-401"
},
{
"category": "other",
"text": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
"title": "CWE-120"
},
{
"category": "other",
"text": "Use of Insufficiently Random Values",
"title": "CWE-330"
},
{
"category": "other",
"text": "Allocation of Resources Without Limits or Throttling",
"title": "CWE-770"
},
{
"category": "description",
"text": "Multiple vulnerabilities in Cisco Secure Firewall ASA and FTD Remote Access SSL VPN allow authenticated remote attackers to exhaust device memory, causing denial of service or device reloads.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20105 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20105.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20105"
},
{
"cve": "CVE-2026-20025",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "other",
"text": "Integer Overflow or Wraparound",
"title": "CWE-190"
},
{
"category": "description",
"text": "A vulnerability in Cisco Secure Firewall ASA and FTD Software\u0027s OSPF protocol allows an authenticated adjacent attacker with the OSPF secret key to cause device reload and denial of service via crafted OSPF LSU packets exploiting insufficient input validation.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20025 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20025.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20025"
},
{
"cve": "CVE-2026-20082",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"notes": [
{
"category": "other",
"text": "Missing Release of Resource after Effective Lifetime",
"title": "CWE-772"
},
{
"category": "description",
"text": "A vulnerability in Cisco Secure Firewall ASA Software\u0027s handling of embryonic connection limits during TCP SYN flood attacks can cause legitimate TCP SYN packets to be dropped, resulting in denial of service.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20082 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20082.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20082"
},
{
"cve": "CVE-2026-20006",
"cwe": {
"id": "CWE-388",
"name": "-"
},
"notes": [
{
"category": "other",
"text": "CWE-388",
"title": "CWE-388"
},
{
"category": "description",
"text": "A vulnerability in the TLS cryptography of the Snort 3 Detection Engine in Cisco Secure Firewall Threat Defense Software allows unauthenticated remote attackers to cause unexpected restarts and denial of service, with TLS 1.3 unaffected.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20006 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20006.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20006"
},
{
"cve": "CVE-2026-20103",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"notes": [
{
"category": "other",
"text": "Allocation of Resources Without Limits or Throttling",
"title": "CWE-770"
},
{
"category": "other",
"text": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
"title": "CWE-120"
},
{
"category": "other",
"text": "Use of Insufficiently Random Values",
"title": "CWE-330"
},
{
"category": "other",
"text": "Missing Release of Memory after Effective Lifetime",
"title": "CWE-401"
},
{
"category": "description",
"text": "Multiple vulnerabilities in Cisco Secure Firewall ASA and FTD Remote Access SSL VPN allow unauthenticated remote attackers to exhaust device memory, causing denial of service and potentially making the web interface unresponsive.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20103 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20103.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20103"
},
{
"cve": "CVE-2026-20008",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
"title": "CWE-78"
},
{
"category": "description",
"text": "A vulnerability in Cisco Secure Firewall ASA and FTD CLI commands allows an authenticated local attacker with Administrator credentials to execute arbitrary Lua code as root due to improper input sanitization.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20008 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20008.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.0,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20008"
},
{
"cve": "CVE-2026-20063",
"cwe": {
"id": "CWE-250",
"name": "Execution with Unnecessary Privileges"
},
"notes": [
{
"category": "other",
"text": "Execution with Unnecessary Privileges",
"title": "CWE-250"
},
{
"category": "other",
"text": "NULL Pointer Dereference",
"title": "CWE-476"
},
{
"category": "other",
"text": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)",
"title": "CWE-88"
},
{
"category": "description",
"text": "Multiple vulnerabilities in Cisco Secure Firewall ASA and FTD Software CLI allow authenticated local attackers with administrative credentials to execute arbitrary root commands or cause device reloads due to insufficient input validation.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20063 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20063.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.0,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20063"
},
{
"cve": "CVE-2026-20106",
"cwe": {
"id": "CWE-401",
"name": "Missing Release of Memory after Effective Lifetime"
},
"notes": [
{
"category": "other",
"text": "Missing Release of Memory after Effective Lifetime",
"title": "CWE-401"
},
{
"category": "other",
"text": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
"title": "CWE-120"
},
{
"category": "other",
"text": "Use of Insufficiently Random Values",
"title": "CWE-330"
},
{
"category": "other",
"text": "Allocation of Resources Without Limits or Throttling",
"title": "CWE-770"
},
{
"category": "description",
"text": "Multiple vulnerabilities in Cisco Secure Firewall ASA and FTD software\u0027s Remote Access SSL VPN, HTTP management, and MUS functionality allow unauthenticated remote attackers to exhaust device memory, causing denial of service and requiring manual reboot.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20106 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20106.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20106"
},
{
"cve": "CVE-2026-20017",
"cwe": {
"id": "CWE-250",
"name": "Execution with Unnecessary Privileges"
},
"notes": [
{
"category": "other",
"text": "Execution with Unnecessary Privileges",
"title": "CWE-250"
},
{
"category": "other",
"text": "NULL Pointer Dereference",
"title": "CWE-476"
},
{
"category": "other",
"text": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)",
"title": "CWE-88"
},
{
"category": "description",
"text": "Multiple vulnerabilities in Cisco Secure Firewall ASA and FTD Software CLI allow authenticated local attackers with administrative credentials to execute arbitrary root commands or cause device reloads due to insufficient input validation.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20017 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20017.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.0,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20017"
},
{
"cve": "CVE-2026-20100",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"notes": [
{
"category": "other",
"text": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
"title": "CWE-120"
},
{
"category": "other",
"text": "Use of Insufficiently Random Values",
"title": "CWE-330"
},
{
"category": "other",
"text": "Missing Release of Memory after Effective Lifetime",
"title": "CWE-401"
},
{
"category": "other",
"text": "Allocation of Resources Without Limits or Throttling",
"title": "CWE-770"
},
{
"category": "description",
"text": "Multiple vulnerabilities in the Remote Access SSL VPN feature of Cisco Secure Firewall ASA and FTD, including a LUA interpreter flaw, allow authenticated remote attackers to cause device reloads and denial of service.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20100 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20100.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20100"
},
{
"cve": "CVE-2026-20044",
"cwe": {
"id": "CWE-269",
"name": "Improper Privilege Management"
},
"notes": [
{
"category": "other",
"text": "Improper Privilege Management",
"title": "CWE-269"
},
{
"category": "description",
"text": "A vulnerability in Cisco Secure Firewall Management Center allows an authenticated local attacker with administrative credentials to execute arbitrary root commands by exploiting insufficient restrictions on remediation modules in lockdown mode.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20044 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20044.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.0,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20044"
},
{
"cve": "CVE-2026-20024",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"notes": [
{
"category": "other",
"text": "Improper Restriction of Operations within the Bounds of a Memory Buffer",
"title": "CWE-119"
},
{
"category": "description",
"text": "A vulnerability in Cisco Secure Firewall ASA and FTD Software\u0027s OSPF protocol allows an authenticated adjacent attacker with the OSPF secret key to cause heap corruption via crafted packets, resulting in device reloads and denial-of-service.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20024 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20024.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20024"
},
{
"cve": "CVE-2026-20064",
"cwe": {
"id": "CWE-250",
"name": "Execution with Unnecessary Privileges"
},
"notes": [
{
"category": "other",
"text": "Execution with Unnecessary Privileges",
"title": "CWE-250"
},
{
"category": "other",
"text": "NULL Pointer Dereference",
"title": "CWE-476"
},
{
"category": "other",
"text": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)",
"title": "CWE-88"
},
{
"category": "description",
"text": "Multiple vulnerabilities in Cisco Secure Firewall ASA and FTD Software allow authenticated local attackers with low privileges to cause device reloads or execute commands with elevated privileges, resulting in denial of service or privilege escalation.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20064 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20064.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20064"
},
{
"cve": "CVE-2026-20023",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "description",
"text": "A vulnerability in Cisco ASA and FTD software\u0027s OSPF protocol allows an unauthenticated adjacent attacker to cause memory corruption and denial of service by sending crafted OSPF packets.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20023 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20023.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20023"
},
{
"cve": "CVE-2026-20003",
"cwe": {
"id": "CWE-89",
"name": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)",
"title": "CWE-89"
},
{
"category": "description",
"text": "Multiple SQL injection vulnerabilities in the REST API and web-based management interface of Cisco Secure Firewall Management Center Software allow authenticated remote attackers with specific roles to access database and OS files.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20003 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20003.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20003"
},
{
"cve": "CVE-2026-20102",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
"title": "CWE-79"
},
{
"category": "description",
"text": "A reflected cross-site scripting (XSS) vulnerability in the SAML 2.0 SSO feature of Cisco Secure Firewall ASA and FTD Software allows unauthenticated remote attackers to exploit insufficient input validation of HTTP parameters.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20102 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20102.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20102"
},
{
"cve": "CVE-2026-20013",
"cwe": {
"id": "CWE-401",
"name": "Missing Release of Memory after Effective Lifetime"
},
"notes": [
{
"category": "other",
"text": "Missing Release of Memory after Effective Lifetime",
"title": "CWE-401"
},
{
"category": "description",
"text": "A vulnerability in Cisco Secure Firewall ASA and FTD Software\u0027s IKEv2 feature allows unauthenticated remote attackers to cause denial-of-service by exhausting memory with crafted packets, potentially requiring manual device reload.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20013 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20013.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20013"
},
{
"cve": "CVE-2026-20070",
"cwe": {
"id": "CWE-80",
"name": "Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)",
"title": "CWE-80"
},
{
"category": "description",
"text": "A vulnerability in Cisco Secure Firewall ASA and FTD VPN web services allows unauthenticated remote attackers to perform cross-site scripting (XSS) via improper input validation in HTTP requests, potentially enabling arbitrary code execution in users\u0027 browsers.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20070 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20070.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20070"
},
{
"cve": "CVE-2026-20001",
"cwe": {
"id": "CWE-89",
"name": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)",
"title": "CWE-89"
},
{
"category": "description",
"text": "Multiple SQL injection vulnerabilities in the REST API and web-based management interface of Cisco Secure Firewall Management Center Software allow authenticated remote attackers with specific roles to access database and certain OS files.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20001 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20001.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20001"
},
{
"cve": "CVE-2026-20052",
"cwe": {
"id": "CWE-788",
"name": "Access of Memory Location After End of Buffer"
},
"notes": [
{
"category": "other",
"text": "Access of Memory Location After End of Buffer",
"title": "CWE-788"
},
{
"category": "description",
"text": "A logic error in memory management during Snort 3 SSL packet inspection in Cisco Secure Firewall Threat Defense Software can allow an unauthenticated remote attacker to cause the Snort 3 Detection Engine to restart, resulting in a denial of service.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20052 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20052.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20052"
}
]
}
GHSA-RGG4-82Q2-JW5V
Vulnerability from github – Published: 2026-03-04 18:31 – Updated: 2026-03-04 18:31
VLAI?
Details
A vulnerability in the REST API of Cisco Secure FMC Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system.
This vulnerability is due to inadequate validation of user-supplied input. An attacker could exploit this vulnerability by sending crafted requests to an affected device. A successful exploit could allow the attacker to obtain read access to the database and read certain files on the underlying operating system. To exploit this vulnerability, the attacker would need valid user credentials with any of the following roles:
Administrator Security approver Intrusion admin Access admin Network admin
Severity ?
4.9 (Medium)
{
"affected": [],
"aliases": [
"CVE-2026-20003"
],
"database_specific": {
"cwe_ids": [
"CWE-89"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2026-03-04T18:16:12Z",
"severity": "MODERATE"
},
"details": "A vulnerability in the REST API of Cisco Secure FMC Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system.\n\n This vulnerability is due to inadequate validation of user-supplied input. An attacker could exploit this vulnerability by sending crafted requests to an affected device. A successful exploit could allow the attacker to obtain read access to the database and read certain files on the underlying operating system. To exploit this vulnerability, the attacker would need valid user credentials with any of the following roles:\n\n \n Administrator\n Security approver\n Intrusion admin\n Access admin\n Network admin",
"id": "GHSA-rgg4-82q2-jw5v",
"modified": "2026-03-04T18:31:54Z",
"published": "2026-03-04T18:31:54Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-20003"
},
{
"type": "WEB",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-sql-injection-2qH6CcJd"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
"type": "CVSS_V3"
}
]
}
CISCO-SA-FMC-SQL-INJECTION-2QH6CCJD
Vulnerability from csaf_cisco - Published: 2026-03-04 16:00 - Updated: 2026-03-04 16:00Summary
Cisco Secure Firewall Management Center Software SQL Injection Vulnerabilities
Notes
Summary
Multiple vulnerabilities in the web-based management interface and REST API of Cisco Secure Firewall Management Center (FMC) Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system.
For more information about these vulnerabilities, see the Details ["#details"] section of this advisory.
Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.
This advisory is part of the March 2026 release of the Cisco Secure Firewall ASA, Secure FMC, and Secure FTD Software Security Advisory Bundled Publication. For a complete list of the advisories and links to them, see Cisco Event Response: March 2026 Semiannual Cisco Secure Firewall ASA, Secure FMC, and Secure FTD Software Security Advisory Bundled Publication ["https://sec.cloudapps.cisco.com/security/center/viewErp.x?alertId=ERP-75736"].
Vulnerable Products
These vulnerabilities affect Cisco Secure FMC Software, regardless of device configuration.
For information about which Cisco software releases are vulnerable, see the Fixed Software ["#fs"] section of this advisory.
Products Confirmed Not Vulnerable
Only products listed in the Vulnerable Products ["#vp"] section of this advisory are known to be affected by these vulnerabilities.
Cisco has confirmed that these vulnerabilities do not affect the following Cisco products:
Secure Firewall Adaptive Security Appliance (ASA) Software
Secure Firewall Threat Defense (FTD) Software
Details
The vulnerabilities are not dependent on one another. Exploitation of one of the vulnerabilities is not required to exploit another vulnerability. In addition, a software release that is affected by one of the vulnerabilities may not be affected by the other vulnerabilities.
Details about the vulnerabilities are as follows:
CVE-2026-20002: Cisco Secure FMC Software SQL Injection Vulnerability
A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system.
This vulnerability is due to inadequate validation of user-supplied input. An attacker could exploit this vulnerability by sending crafted requests to an affected device. A successful exploit could allow the attacker to obtain full access to the database and read certain files on the underlying operating system. To exploit this vulnerability, the attacker would need valid user credentials.
Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
Bug ID(s): CSCwq01517 ["https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwq01517"]
CVE ID: CVE-2026-20002
Security Impact Rating (SIR): High
CVSS Base Score: 8.1
CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CVE-2026-20001: Cisco Secure FMC Software SQL Injection Vulnerability
A vulnerability in the REST API of Cisco Secure FMC Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system.
This vulnerability is due to inadequate validation of user-supplied input. An attacker could exploit this vulnerability by sending crafted requests to an affected device. A successful exploit could allow the attacker to obtain read access to the database and read certain files on the underlying operating system. To exploit this vulnerability, the attacker would need valid user credentials with any of the following roles:
Administrator
Security approver
Access admin
Network admin
Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
Bug ID(s): CSCwo65318 ["https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwo65318"]
CVE ID: CVE-2026-20001
Security Impact Rating (SIR): Medium
CVSS Base Score: 4.9
CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
CVE-2026-20003: Cisco Secure FMC Software SQL Injection Vulnerability
A vulnerability in the REST API of Cisco Secure FMC Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system.
This vulnerability is due to inadequate validation of user-supplied input. An attacker could exploit this vulnerability by sending crafted requests to an affected device. A successful exploit could allow the attacker to obtain read access to the database and read certain files on the underlying operating system. To exploit this vulnerability, the attacker would need valid user credentials with any of the following roles:
Administrator
Security approver
Intrusion admin
Access admin
Network admin
Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
Bug ID(s): CSCwp22451 ["https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwp22451"]
CVE ID: CVE-2026-20003
Security Impact Rating (SIR): Medium
CVSS Base Score: 4.9
CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Workarounds
There are no workarounds that address these vulnerabilities.
Fixed Software
Cisco considers any workarounds and mitigations (if applicable) to be temporary solutions until an upgrade to a fixed software release is available. To fully remediate these vulnerabilities and avoid future exposure as described in this advisory, Cisco strongly recommends that customers upgrade to the fixed software indicated in this advisory.
Cisco Secure Firewall ASA, Secure FMC, and Secure FTD Software
To help customers determine their exposure to vulnerabilities in Cisco Secure Firewall ASA, Secure FMC, and Secure FTD Software, Cisco provides the Cisco Software Checker ["https://sec.cloudapps.cisco.com/security/center/softwarechecker.x"]. This tool identifies any Cisco security advisories that impact a specific software release and the earliest release that fixes the vulnerabilities that are described in each advisory (“First Fixed”). If applicable, the tool also returns the earliest release that fixes all the vulnerabilities that are described in all the advisories that the Software Checker identifies (“Combined First Fixed”).
To use the tool, go to the Cisco Software Checker ["https://sec.cloudapps.cisco.com/security/center/softwarechecker.x"] page and follow the instructions. Alternatively, use the following form to search for vulnerabilities that affect a specific software release. To use the form, follow these steps:
Choose which advisories the tool will search—all advisories, only advisories with a Critical or High Security Impact Rating (SIR) ["https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#asr"], or only this advisory.
Choose the appropriate software.
Choose the appropriate platform.
Enter a release number—for example, 9.20.3.4 for Cisco Secure Firewall ASA Software or 7.4.2 for Cisco Secure FTD Software.
Click Check.
Only this advisory All Critical and High advisories All advisories Cisco ASA Software Cisco FMC Software Cisco FTD Software Any Platform 3000 Series Industrial Security Appliances (ISA) ASA 5500-X Series Firewalls ASA Service Module Adaptive Security Virtual Appliance (ASAv) Firepower 1000 Series Firepower 2100 Series Firepower 4100 Series Firepower 9000 Series Firepower NGFW Virtual Secure Firewall 1200 Series Secure Firewall 3100 Series Secure Firewall 4200 Series Firepower Management Center Appliances
Additional Resources
For help determining the best Cisco Secure Firewall ASA, Secure FMC, or Secure FTD Software release, see the following Recommended Releases documents. If a security advisory recommends a later release, Cisco recommends following the advisory guidance.
Cisco Secure Firewall ASA Compatibility ["https://www.cisco.com/c/en/us/td/docs/security/asa/compatibility/asamatrx.html"]
Cisco Secure Firewall ASA Upgrade Guide ["https://www.cisco.com/c/en/us/td/docs/security/asa/upgrade/asa-upgrade/planning.html"]
Cisco Secure Firewall Threat Defense Compatibility Guide ["https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/compatibility/threat-defense-compatibility.html"]
Vulnerability Policy
To learn about Cisco security vulnerability disclosure policies and publications, see the Security Vulnerability Policy ["http://www.cisco.com/web/about/security/psirt/security_vulnerability_policy.html"]. This document also contains instructions for obtaining fixed software and receiving security vulnerability information from Cisco.
Exploitation and Public Announcements
The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory.
Source
CVE-2026-20002: This vulnerability was found by Kyle Ossinger of the Cisco Advanced Security Initiatives Group (ASIG) during internal security testing.
CVE-2026-20001 and CVE-2026-20003: These vulnerabilities were found by Sanmith Prakash of Cisco during internal security testing.
Legal Disclaimer
SOFTWARE DOWNLOADS AND TECHNICAL SUPPORT
The Cisco Support and Downloads ["https://www.cisco.com/c/en/us/support/index.html"] page on Cisco.com provides information about licensing and downloads. This page can also display customer device support coverage for customers who use the My Devices tool. Please note that customers may download only software that was procured from Cisco directly or through a Cisco authorized reseller or partner and for which the license is still valid.
Customers who purchase directly from Cisco but do not hold a Cisco service contract and customers who make purchases through third-party vendors but are unsuccessful in obtaining fixed software through their point of sale should obtain upgrades by contacting the Cisco Technical Assistance Center (TAC) ["https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.html"]. Customers should have the product serial number available and be prepared to provide the URL of this advisory as evidence of entitlement to a free upgrade.
When considering software upgrades ["https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#fixes"], customers are advised to regularly consult the advisories ["https://www.cisco.com/go/psirt"] for the relevant Cisco products to determine exposure and a complete upgrade solution. In all cases, customers should ensure that the devices to be upgraded contain sufficient memory and confirm that current hardware and software configurations will continue to be supported properly by the new release. If the information is not clear, customers are advised to contact the Cisco Technical Assistance Center (TAC) ["https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.html"] or their contracted maintenance providers.
LEGAL DISCLAIMER DETAILS
CISCO DOES NOT MAKE ANY EXPRESS OR IMPLIED GUARANTEES OR WARRANTIES OF ANY KIND, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. WITHOUT LIMITING THE GENERALITY OF THE FOREGOING, CISCO DOES NOT GUARANTEE THE ACCURACY OR COMPLETENESS OF THIS INFORMATION. THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES THE RIGHT TO CHANGE OR UPDATE THIS DOCUMENT AT ANY TIME.
Copies or summaries of the information contained in this Security Advisory may lack important information or contain factual errors. Customers are advised to visit the Cisco Security Advisories ["https://www.cisco.com/go/psirt"] page for the most recent version of this Security Advisory. The Cisco Product Security Incident Response Team (PSIRT) assesses only the affected and fixed release information that is documented in this advisory. See the Cisco Security Vulnerability Policy ["https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#fixes"] for more information.
{
"document": {
"acknowledgments": [
{
"summary": "CVE-2026-20002: This vulnerability was found by Kyle Ossinger of the Cisco Advanced Security Initiatives Group (ASIG) during internal security testing.\r\n\r\nCVE-2026-20001 and CVE-2026-20003: These vulnerabilities were found by Sanmith Prakash of Cisco during internal security testing."
}
],
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"notes": [
{
"category": "summary",
"text": "Multiple vulnerabilities in the web-based management interface and REST API of Cisco Secure Firewall Management Center (FMC) Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system.\r\n\r\nFor more information about these vulnerabilities, see the Details [\"#details\"] section of this advisory.\r\n\r\nCisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.\r\n\r\n\r\n\r\nThis advisory is part of the March 2026 release of the Cisco Secure Firewall ASA, Secure FMC, and Secure FTD Software Security Advisory Bundled Publication. For a complete list of the advisories and links to them, see Cisco Event Response: March 2026 Semiannual Cisco Secure Firewall ASA, Secure FMC, and Secure FTD Software Security Advisory Bundled Publication [\"https://sec.cloudapps.cisco.com/security/center/viewErp.x?alertId=ERP-75736\"].",
"title": "Summary"
},
{
"category": "general",
"text": "These vulnerabilities affect Cisco Secure FMC Software, regardless of device configuration.\r\n\r\nFor information about which Cisco software releases are vulnerable, see the Fixed Software [\"#fs\"] section of this advisory.",
"title": "Vulnerable Products"
},
{
"category": "general",
"text": "Only products listed in the Vulnerable Products [\"#vp\"] section of this advisory are known to be affected by these vulnerabilities.\r\n\r\nCisco has confirmed that these vulnerabilities do not affect the following Cisco products:\r\n\r\nSecure Firewall Adaptive Security Appliance (ASA) Software\r\nSecure Firewall Threat Defense (FTD) Software",
"title": "Products Confirmed Not Vulnerable"
},
{
"category": "general",
"text": "The vulnerabilities are not dependent on one another. Exploitation of one of the vulnerabilities is not required to exploit another vulnerability. In addition, a software release that is affected by one of the vulnerabilities may not be affected by the other vulnerabilities.\r\n\r\nDetails about the vulnerabilities are as follows:\r\n\r\nCVE-2026-20002: Cisco Secure FMC Software SQL Injection Vulnerability\r\n\r\nA vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system.\r\n\r\nThis vulnerability is due to inadequate validation of user-supplied input. An attacker could exploit this vulnerability by sending crafted requests to an affected device. A successful exploit could allow the attacker to obtain full access to the database and read certain files on the underlying operating system. To exploit this vulnerability, the attacker would need valid user credentials.\r\n\r\nCisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.\r\n\r\nBug ID(s): CSCwq01517 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwq01517\"]\r\nCVE ID: CVE-2026-20002\r\nSecurity Impact Rating (SIR): High\r\nCVSS Base Score: 8.1\r\nCVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N\r\n\r\nCVE-2026-20001: Cisco Secure FMC Software SQL Injection Vulnerability\r\n\r\nA vulnerability in the REST API of Cisco Secure FMC Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system.\r\n\r\nThis vulnerability is due to inadequate validation of user-supplied input. An attacker could exploit this vulnerability by sending crafted requests to an affected device. A successful exploit could allow the attacker to obtain read access to the database and read certain files on the underlying operating system. To exploit this vulnerability, the attacker would need valid user credentials with any of the following roles:\r\n\r\nAdministrator\r\nSecurity approver\r\nAccess admin\r\nNetwork admin\r\n\r\nCisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.\r\n\r\nBug ID(s): CSCwo65318 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwo65318\"]\r\nCVE ID: CVE-2026-20001\r\nSecurity Impact Rating (SIR): Medium\r\nCVSS Base Score: 4.9\r\nCVSS Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N\r\n\r\nCVE-2026-20003: Cisco Secure FMC Software SQL Injection Vulnerability\r\n\r\nA vulnerability in the REST API of Cisco Secure FMC Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system.\r\n\r\nThis vulnerability is due to inadequate validation of user-supplied input. An attacker could exploit this vulnerability by sending crafted requests to an affected device. A successful exploit could allow the attacker to obtain read access to the database and read certain files on the underlying operating system. To exploit this vulnerability, the attacker would need valid user credentials with any of the following roles:\r\n\r\nAdministrator\r\nSecurity approver\r\nIntrusion admin\r\nAccess admin\r\nNetwork admin\r\n\r\nCisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.\r\n\r\nBug ID(s): CSCwp22451 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwp22451\"]\r\nCVE ID: CVE-2026-20003\r\nSecurity Impact Rating (SIR): Medium\r\nCVSS Base Score: 4.9\r\nCVSS Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
"title": "Details"
},
{
"category": "general",
"text": "There are no workarounds that address these vulnerabilities.",
"title": "Workarounds"
},
{
"category": "general",
"text": "Cisco considers any workarounds and mitigations (if applicable) to be temporary solutions until an upgrade to a fixed software release is available. To fully remediate these vulnerabilities and avoid future exposure as described in this advisory, Cisco strongly recommends that customers upgrade to the fixed software indicated in this advisory.\r\n Cisco Secure Firewall ASA, Secure FMC, and Secure FTD Software\r\nTo help customers determine their exposure to vulnerabilities in Cisco Secure Firewall ASA, Secure FMC, and Secure FTD Software, Cisco provides the Cisco Software Checker [\"https://sec.cloudapps.cisco.com/security/center/softwarechecker.x\"]. This tool identifies any Cisco security advisories that impact a specific software release and the earliest release that fixes the vulnerabilities that are described in each advisory (\u201cFirst Fixed\u201d). If applicable, the tool also returns the earliest release that fixes all the vulnerabilities that are described in all the advisories that the Software Checker identifies (\u201cCombined First Fixed\u201d).\r\n\r\nTo use the tool, go to the Cisco Software Checker [\"https://sec.cloudapps.cisco.com/security/center/softwarechecker.x\"] page and follow the instructions. Alternatively, use the following form to search for vulnerabilities that affect a specific software release. To use the form, follow these steps:\r\n\r\nChoose which advisories the tool will search\u2014all advisories, only advisories with a Critical or High Security Impact Rating (SIR) [\"https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#asr\"], or only this advisory.\r\nChoose the appropriate software.\r\nChoose the appropriate platform.\r\nEnter a release number\u2014for example, 9.20.3.4 for Cisco Secure Firewall ASA Software or 7.4.2 for Cisco Secure FTD Software.\r\nClick Check.\r\n Only this advisory All Critical and High advisories All advisories Cisco ASA Software Cisco FMC Software Cisco FTD Software Any Platform 3000 Series Industrial Security Appliances (ISA) ASA 5500-X Series Firewalls ASA Service Module Adaptive Security Virtual Appliance (ASAv) Firepower 1000 Series Firepower 2100 Series Firepower 4100 Series Firepower 9000 Series Firepower NGFW Virtual Secure Firewall 1200 Series Secure Firewall 3100 Series Secure Firewall 4200 Series Firepower Management Center Appliances\r\n\r\n\r\n\r\n\r\n Additional Resources\r\nFor help determining the best Cisco Secure Firewall ASA, Secure FMC, or Secure FTD Software release, see the following Recommended Releases documents. If a security advisory recommends a later release, Cisco recommends following the advisory guidance.\r\n\r\nCisco Secure Firewall ASA Compatibility [\"https://www.cisco.com/c/en/us/td/docs/security/asa/compatibility/asamatrx.html\"]\r\nCisco Secure Firewall ASA Upgrade Guide [\"https://www.cisco.com/c/en/us/td/docs/security/asa/upgrade/asa-upgrade/planning.html\"]\r\nCisco Secure Firewall Threat Defense Compatibility Guide [\"https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/compatibility/threat-defense-compatibility.html\"]",
"title": "Fixed Software"
},
{
"category": "general",
"text": "To learn about Cisco security vulnerability disclosure policies and publications, see the Security Vulnerability Policy [\"http://www.cisco.com/web/about/security/psirt/security_vulnerability_policy.html\"]. This document also contains instructions for obtaining fixed software and receiving security vulnerability information from Cisco.",
"title": "Vulnerability Policy"
},
{
"category": "general",
"text": "The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory.",
"title": "Exploitation and Public Announcements"
},
{
"category": "general",
"text": "CVE-2026-20002: This vulnerability was found by Kyle Ossinger of the Cisco Advanced Security Initiatives Group (ASIG) during internal security testing.\r\n\r\nCVE-2026-20001 and CVE-2026-20003: These vulnerabilities were found by Sanmith Prakash of Cisco during internal security testing.",
"title": "Source"
},
{
"category": "legal_disclaimer",
"text": "SOFTWARE DOWNLOADS AND TECHNICAL SUPPORT\r\n\r\nThe Cisco Support and Downloads [\"https://www.cisco.com/c/en/us/support/index.html\"] page on Cisco.com provides information about licensing and downloads. This page can also display customer device support coverage for customers who use the My Devices tool. Please note that customers may download only software that was procured from Cisco directly or through a Cisco authorized reseller or partner and for which the license is still valid.\r\n\r\nCustomers who purchase directly from Cisco but do not hold a Cisco service contract and customers who make purchases through third-party vendors but are unsuccessful in obtaining fixed software through their point of sale should obtain upgrades by contacting the Cisco Technical Assistance Center (TAC) [\"https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.html\"]. Customers should have the product serial number available and be prepared to provide the URL of this advisory as evidence of entitlement to a free upgrade.\r\n\r\nWhen considering software upgrades [\"https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#fixes\"], customers are advised to regularly consult the advisories [\"https://www.cisco.com/go/psirt\"] for the relevant Cisco products to determine exposure and a complete upgrade solution. In all cases, customers should ensure that the devices to be upgraded contain sufficient memory and confirm that current hardware and software configurations will continue to be supported properly by the new release. If the information is not clear, customers are advised to contact the Cisco Technical Assistance Center (TAC) [\"https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.html\"] or their contracted maintenance providers.\r\n LEGAL DISCLAIMER DETAILS\r\n\r\nCISCO DOES NOT MAKE ANY EXPRESS OR IMPLIED GUARANTEES OR WARRANTIES OF ANY KIND, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. WITHOUT LIMITING THE GENERALITY OF THE FOREGOING, CISCO DOES NOT GUARANTEE THE ACCURACY OR COMPLETENESS OF THIS INFORMATION. THIS DOCUMENT IS PROVIDED ON AN \"AS IS\" BASIS. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES THE RIGHT TO CHANGE OR UPDATE THIS DOCUMENT AT ANY TIME.\r\n\r\nCopies or summaries of the information contained in this Security Advisory may lack important information or contain factual errors. Customers are advised to visit the Cisco Security Advisories [\"https://www.cisco.com/go/psirt\"] page for the most recent version of this Security Advisory. The Cisco Product Security Incident Response Team (PSIRT) assesses only the affected and fixed release information that is documented in this advisory. See the Cisco Security Vulnerability Policy [\"https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#fixes\"] for more information.",
"title": "Legal Disclaimer"
}
],
"publisher": {
"category": "vendor",
"contact_details": "psirt@cisco.com",
"issuing_authority": "Cisco PSIRT",
"name": "Cisco",
"namespace": "https://wwww.cisco.com"
},
"references": [
{
"category": "self",
"summary": "Cisco Secure Firewall Management Center Software SQL Injection Vulnerabilities",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-sql-injection-2qH6CcJd"
},
{
"category": "external",
"summary": "Cisco Event Response: March 2026 Cisco Secure Firewall ASA, Secure FMC, and Secure FTD Software Security Advisory Bundled Publication",
"url": "https://sec.cloudapps.cisco.com/security/center/viewErp.x?alertId=ERP-75736"
},
{
"category": "external",
"summary": "Cisco Security Vulnerability Policy",
"url": "https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html"
},
{
"category": "external",
"summary": "CSCwq01517",
"url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwq01517"
},
{
"category": "external",
"summary": "CSCwo65318",
"url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwo65318"
},
{
"category": "external",
"summary": "CSCwp22451",
"url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwp22451"
},
{
"category": "external",
"summary": "Cisco Software Checker",
"url": "https://sec.cloudapps.cisco.com/security/center/softwarechecker.x"
},
{
"category": "external",
"summary": "Security Impact Rating (SIR)",
"url": "https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#asr"
},
{
"category": "external",
"summary": "Cisco Secure Firewall ASA Compatibility",
"url": "https://www.cisco.com/c/en/us/td/docs/security/asa/compatibility/asamatrx.html"
},
{
"category": "external",
"summary": "Cisco Secure Firewall ASA Upgrade Guide",
"url": "https://www.cisco.com/c/en/us/td/docs/security/asa/upgrade/asa-upgrade/planning.html"
},
{
"category": "external",
"summary": "Cisco Secure Firewall Threat Defense Compatibility Guide",
"url": "https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/compatibility/threat-defense-compatibility.html"
},
{
"category": "external",
"summary": "Security Vulnerability Policy",
"url": "http://www.cisco.com/web/about/security/psirt/security_vulnerability_policy.html"
},
{
"category": "external",
"summary": "Cisco Support and Downloads",
"url": "https://www.cisco.com/c/en/us/support/index.html"
},
{
"category": "external",
"summary": "Cisco Technical Assistance Center (TAC)",
"url": "https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.html"
},
{
"category": "external",
"summary": "considering software upgrades",
"url": "https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#fixes"
},
{
"category": "external",
"summary": "the advisories",
"url": "https://www.cisco.com/go/psirt"
}
],
"title": "Cisco Secure Firewall Management Center Software SQL Injection Vulnerabilities",
"tracking": {
"current_release_date": "2026-03-04T16:00:00+00:00",
"generator": {
"date": "2026-03-05T21:27:13+00:00",
"engine": {
"name": "TVCE"
}
},
"id": "cisco-sa-fmc-sql-injection-2qH6CcJd",
"initial_release_date": "2026-03-04T16:00:00+00:00",
"revision_history": [
{
"date": "2026-03-04T16:08:01+00:00",
"number": "1.0.0",
"summary": "Initial public release."
}
],
"status": "final",
"version": "1.0.0"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"branches": [
{
"category": "service_pack",
"name": "6.4.0",
"product": {
"name": "6.4.0",
"product_id": "CSAFPID-267650"
}
},
{
"category": "service_pack",
"name": "6.4.0.1",
"product": {
"name": "6.4.0.1",
"product_id": "CSAFPID-267651"
}
},
{
"category": "service_pack",
"name": "6.4.0.3",
"product": {
"name": "6.4.0.3",
"product_id": "CSAFPID-267652"
}
},
{
"category": "service_pack",
"name": "6.4.0.2",
"product": {
"name": "6.4.0.2",
"product_id": "CSAFPID-278491"
}
},
{
"category": "service_pack",
"name": "6.4.0.4",
"product": {
"name": "6.4.0.4",
"product_id": "CSAFPID-278492"
}
},
{
"category": "service_pack",
"name": "6.4.0.5",
"product": {
"name": "6.4.0.5",
"product_id": "CSAFPID-278493"
}
},
{
"category": "service_pack",
"name": "6.4.0.6",
"product": {
"name": "6.4.0.6",
"product_id": "CSAFPID-278494"
}
},
{
"category": "service_pack",
"name": "6.4.0.7",
"product": {
"name": "6.4.0.7",
"product_id": "CSAFPID-278495"
}
},
{
"category": "service_pack",
"name": "6.4.0.8",
"product": {
"name": "6.4.0.8",
"product_id": "CSAFPID-278496"
}
},
{
"category": "service_pack",
"name": "6.4.0.9",
"product": {
"name": "6.4.0.9",
"product_id": "CSAFPID-278497"
}
},
{
"category": "service_pack",
"name": "6.4.0.10",
"product": {
"name": "6.4.0.10",
"product_id": "CSAFPID-280641"
}
},
{
"category": "service_pack",
"name": "6.4.0.11",
"product": {
"name": "6.4.0.11",
"product_id": "CSAFPID-281469"
}
},
{
"category": "service_pack",
"name": "6.4.0.12",
"product": {
"name": "6.4.0.12",
"product_id": "CSAFPID-284309"
}
},
{
"category": "service_pack",
"name": "6.4.0.13",
"product": {
"name": "6.4.0.13",
"product_id": "CSAFPID-286297"
}
},
{
"category": "service_pack",
"name": "6.4.0.14",
"product": {
"name": "6.4.0.14",
"product_id": "CSAFPID-286556"
}
},
{
"category": "service_pack",
"name": "6.4.0.15",
"product": {
"name": "6.4.0.15",
"product_id": "CSAFPID-287055"
}
},
{
"category": "service_pack",
"name": "6.4.0.16",
"product": {
"name": "6.4.0.16",
"product_id": "CSAFPID-290666"
}
},
{
"category": "service_pack",
"name": "6.4.0.17",
"product": {
"name": "6.4.0.17",
"product_id": "CSAFPID-300780"
}
},
{
"category": "service_pack",
"name": "6.4.0.18",
"product": {
"name": "6.4.0.18",
"product_id": "CSAFPID-301626"
}
}
],
"category": "product_version",
"name": "6.4"
},
{
"branches": [
{
"category": "service_pack",
"name": "7.0.0",
"product": {
"name": "7.0.0",
"product_id": "CSAFPID-284312"
}
},
{
"category": "service_pack",
"name": "7.0.0.1",
"product": {
"name": "7.0.0.1",
"product_id": "CSAFPID-284313"
}
},
{
"category": "service_pack",
"name": "7.0.1",
"product": {
"name": "7.0.1",
"product_id": "CSAFPID-284793"
}
},
{
"category": "service_pack",
"name": "7.0.1.1",
"product": {
"name": "7.0.1.1",
"product_id": "CSAFPID-286577"
}
},
{
"category": "service_pack",
"name": "7.0.2",
"product": {
"name": "7.0.2",
"product_id": "CSAFPID-286910"
}
},
{
"category": "service_pack",
"name": "7.0.2.1",
"product": {
"name": "7.0.2.1",
"product_id": "CSAFPID-287124"
}
},
{
"category": "service_pack",
"name": "7.0.3",
"product": {
"name": "7.0.3",
"product_id": "CSAFPID-287182"
}
},
{
"category": "service_pack",
"name": "7.0.4",
"product": {
"name": "7.0.4",
"product_id": "CSAFPID-290583"
}
},
{
"category": "service_pack",
"name": "7.0.5",
"product": {
"name": "7.0.5",
"product_id": "CSAFPID-290662"
}
},
{
"category": "service_pack",
"name": "7.0.6",
"product": {
"name": "7.0.6",
"product_id": "CSAFPID-300118"
}
},
{
"category": "service_pack",
"name": "7.0.6.1",
"product": {
"name": "7.0.6.1",
"product_id": "CSAFPID-300944"
}
},
{
"category": "service_pack",
"name": "7.0.6.2",
"product": {
"name": "7.0.6.2",
"product_id": "CSAFPID-301607"
}
},
{
"category": "service_pack",
"name": "7.0.6.3",
"product": {
"name": "7.0.6.3",
"product_id": "CSAFPID-302849"
}
},
{
"category": "service_pack",
"name": "7.0.7",
"product": {
"name": "7.0.7",
"product_id": "CSAFPID-303302"
}
},
{
"category": "service_pack",
"name": "7.0.8",
"product": {
"name": "7.0.8",
"product_id": "CSAFPID-306552"
}
},
{
"category": "service_pack",
"name": "7.0.8.1",
"product": {
"name": "7.0.8.1",
"product_id": "CSAFPID-306654"
}
}
],
"category": "product_version",
"name": "7.0"
},
{
"branches": [
{
"category": "service_pack",
"name": "7.1.0",
"product": {
"name": "7.1.0",
"product_id": "CSAFPID-285972"
}
},
{
"category": "service_pack",
"name": "7.1.0.1",
"product": {
"name": "7.1.0.1",
"product_id": "CSAFPID-286576"
}
},
{
"category": "service_pack",
"name": "7.1.0.2",
"product": {
"name": "7.1.0.2",
"product_id": "CSAFPID-290475"
}
},
{
"category": "service_pack",
"name": "7.1.0.3",
"product": {
"name": "7.1.0.3",
"product_id": "CSAFPID-295139"
}
}
],
"category": "product_version",
"name": "7.1"
},
{
"branches": [
{
"category": "service_pack",
"name": "7.2.0",
"product": {
"name": "7.2.0",
"product_id": "CSAFPID-287074"
}
},
{
"category": "service_pack",
"name": "7.2.1",
"product": {
"name": "7.2.1",
"product_id": "CSAFPID-290564"
}
},
{
"category": "service_pack",
"name": "7.2.2",
"product": {
"name": "7.2.2",
"product_id": "CSAFPID-292412"
}
},
{
"category": "service_pack",
"name": "7.2.0.1",
"product": {
"name": "7.2.0.1",
"product_id": "CSAFPID-292659"
}
},
{
"category": "service_pack",
"name": "7.2.3",
"product": {
"name": "7.2.3",
"product_id": "CSAFPID-294798"
}
},
{
"category": "service_pack",
"name": "7.2.3.1",
"product": {
"name": "7.2.3.1",
"product_id": "CSAFPID-295354"
}
},
{
"category": "service_pack",
"name": "7.2.4",
"product": {
"name": "7.2.4",
"product_id": "CSAFPID-295499"
}
},
{
"category": "service_pack",
"name": "7.2.4.1",
"product": {
"name": "7.2.4.1",
"product_id": "CSAFPID-300182"
}
},
{
"category": "service_pack",
"name": "7.2.5",
"product": {
"name": "7.2.5",
"product_id": "CSAFPID-300183"
}
},
{
"category": "service_pack",
"name": "7.2.5.1",
"product": {
"name": "7.2.5.1",
"product_id": "CSAFPID-300946"
}
},
{
"category": "service_pack",
"name": "7.2.6",
"product": {
"name": "7.2.6",
"product_id": "CSAFPID-301470"
}
},
{
"category": "service_pack",
"name": "7.2.7",
"product": {
"name": "7.2.7",
"product_id": "CSAFPID-301637"
}
},
{
"category": "service_pack",
"name": "7.2.5.2",
"product": {
"name": "7.2.5.2",
"product_id": "CSAFPID-301704"
}
},
{
"category": "service_pack",
"name": "7.2.8",
"product": {
"name": "7.2.8",
"product_id": "CSAFPID-302630"
}
},
{
"category": "service_pack",
"name": "7.2.8.1",
"product": {
"name": "7.2.8.1",
"product_id": "CSAFPID-302816"
}
},
{
"category": "service_pack",
"name": "7.2.9",
"product": {
"name": "7.2.9",
"product_id": "CSAFPID-302998"
}
},
{
"category": "service_pack",
"name": "7.2.10",
"product": {
"name": "7.2.10",
"product_id": "CSAFPID-305271"
}
},
{
"category": "service_pack",
"name": "7.2.10.2",
"product": {
"name": "7.2.10.2",
"product_id": "CSAFPID-306655"
}
},
{
"category": "service_pack",
"name": "7.2.10.1",
"product": {
"name": "7.2.10.1",
"product_id": "CSAFPID-306658"
}
}
],
"category": "product_version",
"name": "7.2"
},
{
"branches": [
{
"category": "service_pack",
"name": "7.3.0",
"product": {
"name": "7.3.0",
"product_id": "CSAFPID-292361"
}
},
{
"category": "service_pack",
"name": "7.3.1",
"product": {
"name": "7.3.1",
"product_id": "CSAFPID-294961"
}
},
{
"category": "service_pack",
"name": "7.3.1.1",
"product": {
"name": "7.3.1.1",
"product_id": "CSAFPID-300511"
}
},
{
"category": "service_pack",
"name": "7.3.1.2",
"product": {
"name": "7.3.1.2",
"product_id": "CSAFPID-301706"
}
}
],
"category": "product_version",
"name": "7.3"
},
{
"branches": [
{
"category": "service_pack",
"name": "7.4.0",
"product": {
"name": "7.4.0",
"product_id": "CSAFPID-300735"
}
},
{
"category": "service_pack",
"name": "7.4.1",
"product": {
"name": "7.4.1",
"product_id": "CSAFPID-301110"
}
},
{
"category": "service_pack",
"name": "7.4.1.1",
"product": {
"name": "7.4.1.1",
"product_id": "CSAFPID-301608"
}
},
{
"category": "service_pack",
"name": "7.4.2",
"product": {
"name": "7.4.2",
"product_id": "CSAFPID-302687"
}
},
{
"category": "service_pack",
"name": "7.4.2.1",
"product": {
"name": "7.4.2.1",
"product_id": "CSAFPID-302967"
}
},
{
"category": "service_pack",
"name": "7.4.2.2",
"product": {
"name": "7.4.2.2",
"product_id": "CSAFPID-303336"
}
},
{
"category": "service_pack",
"name": "7.4.2.3",
"product": {
"name": "7.4.2.3",
"product_id": "CSAFPID-305307"
}
},
{
"category": "service_pack",
"name": "7.4.2.4",
"product": {
"name": "7.4.2.4",
"product_id": "CSAFPID-306652"
}
},
{
"category": "service_pack",
"name": "7.4.3",
"product": {
"name": "7.4.3",
"product_id": "CSAFPID-306666"
}
}
],
"category": "product_version",
"name": "7.4"
},
{
"branches": [
{
"category": "service_pack",
"name": "7.6.0",
"product": {
"name": "7.6.0",
"product_id": "CSAFPID-302872"
}
},
{
"category": "service_pack",
"name": "7.6.1",
"product": {
"name": "7.6.1",
"product_id": "CSAFPID-305281"
}
},
{
"category": "service_pack",
"name": "7.6.2",
"product": {
"name": "7.6.2",
"product_id": "CSAFPID-306550"
}
},
{
"category": "service_pack",
"name": "7.6.2.1",
"product": {
"name": "7.6.2.1",
"product_id": "CSAFPID-306644"
}
},
{
"category": "service_pack",
"name": "7.6.3",
"product": {
"name": "7.6.3",
"product_id": "CSAFPID-306832"
}
}
],
"category": "product_version",
"name": "7.6"
},
{
"branches": [
{
"category": "service_pack",
"name": "7.7.0",
"product": {
"name": "7.7.0",
"product_id": "CSAFPID-303351"
}
},
{
"category": "service_pack",
"name": "7.7.10",
"product": {
"name": "7.7.10",
"product_id": "CSAFPID-306553"
}
},
{
"category": "service_pack",
"name": "7.7.10.1",
"product": {
"name": "7.7.10.1",
"product_id": "CSAFPID-306645"
}
}
],
"category": "product_version",
"name": "7.7"
}
],
"category": "product_family",
"name": "Cisco Secure Firewall Management Center (FMC)"
},
{
"category": "product_name",
"name": "Cisco Secure Firewall Management Center (FMC) Appliances",
"product": {
"name": "Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-277516"
}
}
],
"category": "vendor",
"name": "Cisco"
}
],
"relationships": [
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 6.4.0 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-267650:277516"
},
"product_reference": "CSAFPID-267650",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 6.4.0.1 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-267651:277516"
},
"product_reference": "CSAFPID-267651",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 6.4.0.3 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-267652:277516"
},
"product_reference": "CSAFPID-267652",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 6.4.0.2 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-278491:277516"
},
"product_reference": "CSAFPID-278491",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 6.4.0.4 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-278492:277516"
},
"product_reference": "CSAFPID-278492",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 6.4.0.5 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-278493:277516"
},
"product_reference": "CSAFPID-278493",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 6.4.0.6 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-278494:277516"
},
"product_reference": "CSAFPID-278494",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 6.4.0.7 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-278495:277516"
},
"product_reference": "CSAFPID-278495",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 6.4.0.8 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-278496:277516"
},
"product_reference": "CSAFPID-278496",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 6.4.0.9 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-278497:277516"
},
"product_reference": "CSAFPID-278497",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 6.4.0.10 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-280641:277516"
},
"product_reference": "CSAFPID-280641",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 6.4.0.11 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-281469:277516"
},
"product_reference": "CSAFPID-281469",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 6.4.0.12 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-284309:277516"
},
"product_reference": "CSAFPID-284309",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 6.4.0.13 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-286297:277516"
},
"product_reference": "CSAFPID-286297",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 6.4.0.14 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-286556:277516"
},
"product_reference": "CSAFPID-286556",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 6.4.0.15 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-287055:277516"
},
"product_reference": "CSAFPID-287055",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 6.4.0.16 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-290666:277516"
},
"product_reference": "CSAFPID-290666",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 6.4.0.17 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-300780:277516"
},
"product_reference": "CSAFPID-300780",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 6.4.0.18 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-301626:277516"
},
"product_reference": "CSAFPID-301626",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.0.0 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-284312:277516"
},
"product_reference": "CSAFPID-284312",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.0.0.1 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-284313:277516"
},
"product_reference": "CSAFPID-284313",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.0.1 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-284793:277516"
},
"product_reference": "CSAFPID-284793",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.0.1.1 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-286577:277516"
},
"product_reference": "CSAFPID-286577",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.0.2 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-286910:277516"
},
"product_reference": "CSAFPID-286910",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.0.2.1 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-287124:277516"
},
"product_reference": "CSAFPID-287124",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.0.3 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-287182:277516"
},
"product_reference": "CSAFPID-287182",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.0.4 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-290583:277516"
},
"product_reference": "CSAFPID-290583",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.0.5 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-290662:277516"
},
"product_reference": "CSAFPID-290662",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.0.6 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-300118:277516"
},
"product_reference": "CSAFPID-300118",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.0.6.1 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-300944:277516"
},
"product_reference": "CSAFPID-300944",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.0.6.2 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-301607:277516"
},
"product_reference": "CSAFPID-301607",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.0.6.3 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-302849:277516"
},
"product_reference": "CSAFPID-302849",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.0.7 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-303302:277516"
},
"product_reference": "CSAFPID-303302",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.0.8 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-306552:277516"
},
"product_reference": "CSAFPID-306552",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.0.8.1 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-306654:277516"
},
"product_reference": "CSAFPID-306654",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.1.0 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-285972:277516"
},
"product_reference": "CSAFPID-285972",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.1.0.1 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-286576:277516"
},
"product_reference": "CSAFPID-286576",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.1.0.2 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-290475:277516"
},
"product_reference": "CSAFPID-290475",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.1.0.3 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-295139:277516"
},
"product_reference": "CSAFPID-295139",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.2.0 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-287074:277516"
},
"product_reference": "CSAFPID-287074",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.2.1 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-290564:277516"
},
"product_reference": "CSAFPID-290564",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.2.2 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-292412:277516"
},
"product_reference": "CSAFPID-292412",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.2.0.1 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-292659:277516"
},
"product_reference": "CSAFPID-292659",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.2.3 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-294798:277516"
},
"product_reference": "CSAFPID-294798",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.2.3.1 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-295354:277516"
},
"product_reference": "CSAFPID-295354",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.2.4 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-295499:277516"
},
"product_reference": "CSAFPID-295499",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.2.4.1 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-300182:277516"
},
"product_reference": "CSAFPID-300182",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.2.5 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-300183:277516"
},
"product_reference": "CSAFPID-300183",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.2.5.1 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-300946:277516"
},
"product_reference": "CSAFPID-300946",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.2.6 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-301470:277516"
},
"product_reference": "CSAFPID-301470",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.2.7 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-301637:277516"
},
"product_reference": "CSAFPID-301637",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.2.5.2 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-301704:277516"
},
"product_reference": "CSAFPID-301704",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.2.8 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-302630:277516"
},
"product_reference": "CSAFPID-302630",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.2.8.1 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-302816:277516"
},
"product_reference": "CSAFPID-302816",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.2.9 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-302998:277516"
},
"product_reference": "CSAFPID-302998",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.2.10 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-305271:277516"
},
"product_reference": "CSAFPID-305271",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.2.10.2 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-306655:277516"
},
"product_reference": "CSAFPID-306655",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.2.10.1 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-306658:277516"
},
"product_reference": "CSAFPID-306658",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.3.0 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-292361:277516"
},
"product_reference": "CSAFPID-292361",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.3.1 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-294961:277516"
},
"product_reference": "CSAFPID-294961",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.3.1.1 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-300511:277516"
},
"product_reference": "CSAFPID-300511",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.3.1.2 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-301706:277516"
},
"product_reference": "CSAFPID-301706",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.4.0 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-300735:277516"
},
"product_reference": "CSAFPID-300735",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.4.1 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-301110:277516"
},
"product_reference": "CSAFPID-301110",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.4.1.1 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-301608:277516"
},
"product_reference": "CSAFPID-301608",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.4.2 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-302687:277516"
},
"product_reference": "CSAFPID-302687",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.4.2.1 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-302967:277516"
},
"product_reference": "CSAFPID-302967",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.4.2.2 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-303336:277516"
},
"product_reference": "CSAFPID-303336",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.4.2.3 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-305307:277516"
},
"product_reference": "CSAFPID-305307",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.4.2.4 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-306652:277516"
},
"product_reference": "CSAFPID-306652",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.4.3 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-306666:277516"
},
"product_reference": "CSAFPID-306666",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.6.0 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-302872:277516"
},
"product_reference": "CSAFPID-302872",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.6.1 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-305281:277516"
},
"product_reference": "CSAFPID-305281",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.6.2 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-306550:277516"
},
"product_reference": "CSAFPID-306550",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.6.2.1 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-306644:277516"
},
"product_reference": "CSAFPID-306644",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.6.3 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-306832:277516"
},
"product_reference": "CSAFPID-306832",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.7.0 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-303351:277516"
},
"product_reference": "CSAFPID-303351",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.7.10 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-306553:277516"
},
"product_reference": "CSAFPID-306553",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.7.10.1 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-306645:277516"
},
"product_reference": "CSAFPID-306645",
"relates_to_product_reference": "CSAFPID-277516"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-20001",
"ids": [
{
"system_name": "Cisco Bug ID",
"text": "CSCwo65318"
}
],
"notes": [
{
"category": "other",
"text": "Complete.",
"title": "Affected Product Comprehensiveness"
}
],
"product_status": {
"known_affected": [
"CSAFPID-284312:277516",
"CSAFPID-284313:277516",
"CSAFPID-284793:277516",
"CSAFPID-285972:277516",
"CSAFPID-286576:277516",
"CSAFPID-286577:277516",
"CSAFPID-286910:277516",
"CSAFPID-287074:277516",
"CSAFPID-287124:277516",
"CSAFPID-287182:277516",
"CSAFPID-290475:277516",
"CSAFPID-290564:277516",
"CSAFPID-290583:277516",
"CSAFPID-290662:277516",
"CSAFPID-292361:277516",
"CSAFPID-292412:277516",
"CSAFPID-292659:277516",
"CSAFPID-294798:277516",
"CSAFPID-294961:277516",
"CSAFPID-295139:277516",
"CSAFPID-295354:277516",
"CSAFPID-295499:277516",
"CSAFPID-300118:277516",
"CSAFPID-300182:277516",
"CSAFPID-300183:277516",
"CSAFPID-300511:277516",
"CSAFPID-300735:277516",
"CSAFPID-300944:277516",
"CSAFPID-300946:277516",
"CSAFPID-301110:277516",
"CSAFPID-301470:277516",
"CSAFPID-301607:277516",
"CSAFPID-301608:277516",
"CSAFPID-301637:277516",
"CSAFPID-301704:277516",
"CSAFPID-301706:277516",
"CSAFPID-302630:277516",
"CSAFPID-302687:277516",
"CSAFPID-302816:277516",
"CSAFPID-302849:277516",
"CSAFPID-302872:277516",
"CSAFPID-302967:277516",
"CSAFPID-302998:277516",
"CSAFPID-303302:277516",
"CSAFPID-303336:277516",
"CSAFPID-303351:277516",
"CSAFPID-305271:277516",
"CSAFPID-305281:277516",
"CSAFPID-305307:277516",
"CSAFPID-306550:277516",
"CSAFPID-306552:277516",
"CSAFPID-306644:277516",
"CSAFPID-306652:277516",
"CSAFPID-306654:277516",
"CSAFPID-306655:277516",
"CSAFPID-306658:277516",
"CSAFPID-306832:277516"
]
},
"release_date": "2026-03-04T16:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"details": "Cisco has released software updates that address this vulnerability.",
"product_ids": [
"CSAFPID-284312:277516",
"CSAFPID-284313:277516",
"CSAFPID-284793:277516",
"CSAFPID-285972:277516",
"CSAFPID-286576:277516",
"CSAFPID-286577:277516",
"CSAFPID-286910:277516",
"CSAFPID-287074:277516",
"CSAFPID-287124:277516",
"CSAFPID-287182:277516",
"CSAFPID-290475:277516",
"CSAFPID-290564:277516",
"CSAFPID-290583:277516",
"CSAFPID-290662:277516",
"CSAFPID-292361:277516",
"CSAFPID-292412:277516",
"CSAFPID-292659:277516",
"CSAFPID-294798:277516",
"CSAFPID-294961:277516",
"CSAFPID-295139:277516",
"CSAFPID-295354:277516",
"CSAFPID-295499:277516",
"CSAFPID-300118:277516",
"CSAFPID-300182:277516",
"CSAFPID-300183:277516",
"CSAFPID-300511:277516",
"CSAFPID-300735:277516",
"CSAFPID-300944:277516",
"CSAFPID-300946:277516",
"CSAFPID-301110:277516",
"CSAFPID-301470:277516",
"CSAFPID-301607:277516",
"CSAFPID-301608:277516",
"CSAFPID-301637:277516",
"CSAFPID-301704:277516",
"CSAFPID-301706:277516",
"CSAFPID-302630:277516",
"CSAFPID-302687:277516",
"CSAFPID-302816:277516",
"CSAFPID-302849:277516",
"CSAFPID-302872:277516",
"CSAFPID-302967:277516",
"CSAFPID-302998:277516",
"CSAFPID-303302:277516",
"CSAFPID-303336:277516",
"CSAFPID-303351:277516",
"CSAFPID-305271:277516",
"CSAFPID-305281:277516",
"CSAFPID-305307:277516",
"CSAFPID-306550:277516",
"CSAFPID-306552:277516",
"CSAFPID-306644:277516",
"CSAFPID-306652:277516",
"CSAFPID-306654:277516",
"CSAFPID-306655:277516",
"CSAFPID-306658:277516",
"CSAFPID-306832:277516"
],
"url": "https://software.cisco.com"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-284312:277516",
"CSAFPID-284313:277516",
"CSAFPID-284793:277516",
"CSAFPID-285972:277516",
"CSAFPID-286576:277516",
"CSAFPID-286577:277516",
"CSAFPID-286910:277516",
"CSAFPID-287074:277516",
"CSAFPID-287124:277516",
"CSAFPID-287182:277516",
"CSAFPID-290475:277516",
"CSAFPID-290564:277516",
"CSAFPID-290583:277516",
"CSAFPID-290662:277516",
"CSAFPID-292361:277516",
"CSAFPID-292412:277516",
"CSAFPID-292659:277516",
"CSAFPID-294798:277516",
"CSAFPID-294961:277516",
"CSAFPID-295139:277516",
"CSAFPID-295354:277516",
"CSAFPID-295499:277516",
"CSAFPID-300118:277516",
"CSAFPID-300182:277516",
"CSAFPID-300183:277516",
"CSAFPID-300511:277516",
"CSAFPID-300735:277516",
"CSAFPID-300944:277516",
"CSAFPID-300946:277516",
"CSAFPID-301110:277516",
"CSAFPID-301470:277516",
"CSAFPID-301607:277516",
"CSAFPID-301608:277516",
"CSAFPID-301637:277516",
"CSAFPID-301704:277516",
"CSAFPID-301706:277516",
"CSAFPID-302630:277516",
"CSAFPID-302687:277516",
"CSAFPID-302816:277516",
"CSAFPID-302849:277516",
"CSAFPID-302872:277516",
"CSAFPID-302967:277516",
"CSAFPID-302998:277516",
"CSAFPID-303302:277516",
"CSAFPID-303336:277516",
"CSAFPID-303351:277516",
"CSAFPID-305271:277516",
"CSAFPID-305281:277516",
"CSAFPID-305307:277516",
"CSAFPID-306550:277516",
"CSAFPID-306552:277516",
"CSAFPID-306644:277516",
"CSAFPID-306652:277516",
"CSAFPID-306654:277516",
"CSAFPID-306655:277516",
"CSAFPID-306658:277516",
"CSAFPID-306832:277516"
]
}
],
"title": "Cisco Secure Firewall Management Center Software SQL Injection Vulnerabilities"
},
{
"cve": "CVE-2026-20002",
"ids": [
{
"system_name": "Cisco Bug ID",
"text": "CSCwq01517"
}
],
"notes": [
{
"category": "other",
"text": "Complete.",
"title": "Affected Product Comprehensiveness"
}
],
"product_status": {
"known_affected": [
"CSAFPID-267650:277516",
"CSAFPID-267651:277516",
"CSAFPID-267652:277516",
"CSAFPID-278491:277516",
"CSAFPID-278492:277516",
"CSAFPID-278493:277516",
"CSAFPID-278494:277516",
"CSAFPID-278495:277516",
"CSAFPID-278496:277516",
"CSAFPID-278497:277516",
"CSAFPID-280641:277516",
"CSAFPID-281469:277516",
"CSAFPID-284309:277516",
"CSAFPID-284312:277516",
"CSAFPID-284313:277516",
"CSAFPID-284793:277516",
"CSAFPID-285972:277516",
"CSAFPID-286297:277516",
"CSAFPID-286556:277516",
"CSAFPID-286576:277516",
"CSAFPID-286577:277516",
"CSAFPID-286910:277516",
"CSAFPID-287055:277516",
"CSAFPID-287074:277516",
"CSAFPID-287124:277516",
"CSAFPID-287182:277516",
"CSAFPID-290475:277516",
"CSAFPID-290564:277516",
"CSAFPID-290583:277516",
"CSAFPID-290662:277516",
"CSAFPID-290666:277516",
"CSAFPID-292361:277516",
"CSAFPID-292412:277516",
"CSAFPID-292659:277516",
"CSAFPID-294798:277516",
"CSAFPID-294961:277516",
"CSAFPID-295139:277516",
"CSAFPID-295354:277516",
"CSAFPID-295499:277516",
"CSAFPID-300118:277516",
"CSAFPID-300182:277516",
"CSAFPID-300183:277516",
"CSAFPID-300511:277516",
"CSAFPID-300735:277516",
"CSAFPID-300780:277516",
"CSAFPID-300944:277516",
"CSAFPID-300946:277516",
"CSAFPID-301110:277516",
"CSAFPID-301470:277516",
"CSAFPID-301607:277516",
"CSAFPID-301608:277516",
"CSAFPID-301626:277516",
"CSAFPID-301637:277516",
"CSAFPID-301704:277516",
"CSAFPID-301706:277516",
"CSAFPID-302630:277516",
"CSAFPID-302687:277516",
"CSAFPID-302816:277516",
"CSAFPID-302849:277516",
"CSAFPID-302872:277516",
"CSAFPID-302967:277516",
"CSAFPID-302998:277516",
"CSAFPID-303302:277516",
"CSAFPID-303336:277516",
"CSAFPID-303351:277516",
"CSAFPID-305271:277516",
"CSAFPID-305281:277516",
"CSAFPID-305307:277516",
"CSAFPID-306550:277516",
"CSAFPID-306552:277516",
"CSAFPID-306553:277516",
"CSAFPID-306644:277516",
"CSAFPID-306645:277516",
"CSAFPID-306652:277516",
"CSAFPID-306654:277516",
"CSAFPID-306655:277516",
"CSAFPID-306658:277516",
"CSAFPID-306666:277516",
"CSAFPID-306832:277516"
]
},
"release_date": "2026-03-04T16:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"details": "Cisco has released software updates that address this vulnerability.",
"product_ids": [
"CSAFPID-267650:277516",
"CSAFPID-267651:277516",
"CSAFPID-267652:277516",
"CSAFPID-278491:277516",
"CSAFPID-278492:277516",
"CSAFPID-278493:277516",
"CSAFPID-278494:277516",
"CSAFPID-278495:277516",
"CSAFPID-278496:277516",
"CSAFPID-278497:277516",
"CSAFPID-280641:277516",
"CSAFPID-281469:277516",
"CSAFPID-284309:277516",
"CSAFPID-284312:277516",
"CSAFPID-284313:277516",
"CSAFPID-284793:277516",
"CSAFPID-285972:277516",
"CSAFPID-286297:277516",
"CSAFPID-286556:277516",
"CSAFPID-286576:277516",
"CSAFPID-286577:277516",
"CSAFPID-286910:277516",
"CSAFPID-287055:277516",
"CSAFPID-287074:277516",
"CSAFPID-287124:277516",
"CSAFPID-287182:277516",
"CSAFPID-290475:277516",
"CSAFPID-290564:277516",
"CSAFPID-290583:277516",
"CSAFPID-290662:277516",
"CSAFPID-290666:277516",
"CSAFPID-292361:277516",
"CSAFPID-292412:277516",
"CSAFPID-292659:277516",
"CSAFPID-294798:277516",
"CSAFPID-294961:277516",
"CSAFPID-295139:277516",
"CSAFPID-295354:277516",
"CSAFPID-295499:277516",
"CSAFPID-300118:277516",
"CSAFPID-300182:277516",
"CSAFPID-300183:277516",
"CSAFPID-300511:277516",
"CSAFPID-300735:277516",
"CSAFPID-300780:277516",
"CSAFPID-300944:277516",
"CSAFPID-300946:277516",
"CSAFPID-301110:277516",
"CSAFPID-301470:277516",
"CSAFPID-301607:277516",
"CSAFPID-301608:277516",
"CSAFPID-301626:277516",
"CSAFPID-301637:277516",
"CSAFPID-301704:277516",
"CSAFPID-301706:277516",
"CSAFPID-302630:277516",
"CSAFPID-302687:277516",
"CSAFPID-302816:277516",
"CSAFPID-302849:277516",
"CSAFPID-302872:277516",
"CSAFPID-302967:277516",
"CSAFPID-302998:277516",
"CSAFPID-303302:277516",
"CSAFPID-303336:277516",
"CSAFPID-303351:277516",
"CSAFPID-305271:277516",
"CSAFPID-305281:277516",
"CSAFPID-305307:277516",
"CSAFPID-306550:277516",
"CSAFPID-306552:277516",
"CSAFPID-306553:277516",
"CSAFPID-306644:277516",
"CSAFPID-306645:277516",
"CSAFPID-306652:277516",
"CSAFPID-306654:277516",
"CSAFPID-306655:277516",
"CSAFPID-306658:277516",
"CSAFPID-306666:277516",
"CSAFPID-306832:277516"
],
"url": "https://software.cisco.com"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-267650:277516",
"CSAFPID-267651:277516",
"CSAFPID-267652:277516",
"CSAFPID-278491:277516",
"CSAFPID-278492:277516",
"CSAFPID-278493:277516",
"CSAFPID-278494:277516",
"CSAFPID-278495:277516",
"CSAFPID-278496:277516",
"CSAFPID-278497:277516",
"CSAFPID-280641:277516",
"CSAFPID-281469:277516",
"CSAFPID-284309:277516",
"CSAFPID-284312:277516",
"CSAFPID-284313:277516",
"CSAFPID-284793:277516",
"CSAFPID-285972:277516",
"CSAFPID-286297:277516",
"CSAFPID-286556:277516",
"CSAFPID-286576:277516",
"CSAFPID-286577:277516",
"CSAFPID-286910:277516",
"CSAFPID-287055:277516",
"CSAFPID-287074:277516",
"CSAFPID-287124:277516",
"CSAFPID-287182:277516",
"CSAFPID-290475:277516",
"CSAFPID-290564:277516",
"CSAFPID-290583:277516",
"CSAFPID-290662:277516",
"CSAFPID-290666:277516",
"CSAFPID-292361:277516",
"CSAFPID-292412:277516",
"CSAFPID-292659:277516",
"CSAFPID-294798:277516",
"CSAFPID-294961:277516",
"CSAFPID-295139:277516",
"CSAFPID-295354:277516",
"CSAFPID-295499:277516",
"CSAFPID-300118:277516",
"CSAFPID-300182:277516",
"CSAFPID-300183:277516",
"CSAFPID-300511:277516",
"CSAFPID-300735:277516",
"CSAFPID-300780:277516",
"CSAFPID-300944:277516",
"CSAFPID-300946:277516",
"CSAFPID-301110:277516",
"CSAFPID-301470:277516",
"CSAFPID-301607:277516",
"CSAFPID-301608:277516",
"CSAFPID-301626:277516",
"CSAFPID-301637:277516",
"CSAFPID-301704:277516",
"CSAFPID-301706:277516",
"CSAFPID-302630:277516",
"CSAFPID-302687:277516",
"CSAFPID-302816:277516",
"CSAFPID-302849:277516",
"CSAFPID-302872:277516",
"CSAFPID-302967:277516",
"CSAFPID-302998:277516",
"CSAFPID-303302:277516",
"CSAFPID-303336:277516",
"CSAFPID-303351:277516",
"CSAFPID-305271:277516",
"CSAFPID-305281:277516",
"CSAFPID-305307:277516",
"CSAFPID-306550:277516",
"CSAFPID-306552:277516",
"CSAFPID-306553:277516",
"CSAFPID-306644:277516",
"CSAFPID-306645:277516",
"CSAFPID-306652:277516",
"CSAFPID-306654:277516",
"CSAFPID-306655:277516",
"CSAFPID-306658:277516",
"CSAFPID-306666:277516",
"CSAFPID-306832:277516"
]
}
],
"title": "Cisco Secure Firepower Management Center Software SQL Injection Vulnerability"
},
{
"cve": "CVE-2026-20003",
"ids": [
{
"system_name": "Cisco Bug ID",
"text": "CSCwp22451"
}
],
"notes": [
{
"category": "other",
"text": "Complete.",
"title": "Affected Product Comprehensiveness"
}
],
"product_status": {
"known_affected": [
"CSAFPID-284312:277516",
"CSAFPID-284313:277516",
"CSAFPID-284793:277516",
"CSAFPID-285972:277516",
"CSAFPID-286576:277516",
"CSAFPID-286577:277516",
"CSAFPID-286910:277516",
"CSAFPID-287074:277516",
"CSAFPID-287124:277516",
"CSAFPID-287182:277516",
"CSAFPID-290475:277516",
"CSAFPID-290564:277516",
"CSAFPID-290583:277516",
"CSAFPID-290662:277516",
"CSAFPID-292361:277516",
"CSAFPID-292412:277516",
"CSAFPID-292659:277516",
"CSAFPID-294798:277516",
"CSAFPID-294961:277516",
"CSAFPID-295139:277516",
"CSAFPID-295354:277516",
"CSAFPID-295499:277516",
"CSAFPID-300118:277516",
"CSAFPID-300182:277516",
"CSAFPID-300183:277516",
"CSAFPID-300511:277516",
"CSAFPID-300735:277516",
"CSAFPID-300944:277516",
"CSAFPID-300946:277516",
"CSAFPID-301110:277516",
"CSAFPID-301470:277516",
"CSAFPID-301607:277516",
"CSAFPID-301608:277516",
"CSAFPID-301637:277516",
"CSAFPID-301704:277516",
"CSAFPID-301706:277516",
"CSAFPID-302630:277516",
"CSAFPID-302687:277516",
"CSAFPID-302816:277516",
"CSAFPID-302849:277516",
"CSAFPID-302872:277516",
"CSAFPID-302967:277516",
"CSAFPID-302998:277516",
"CSAFPID-303302:277516",
"CSAFPID-303336:277516",
"CSAFPID-303351:277516",
"CSAFPID-305271:277516",
"CSAFPID-305281:277516",
"CSAFPID-305307:277516",
"CSAFPID-306550:277516",
"CSAFPID-306552:277516",
"CSAFPID-306553:277516",
"CSAFPID-306644:277516",
"CSAFPID-306645:277516",
"CSAFPID-306652:277516",
"CSAFPID-306654:277516",
"CSAFPID-306655:277516",
"CSAFPID-306658:277516",
"CSAFPID-306666:277516",
"CSAFPID-306832:277516"
]
},
"release_date": "2026-03-04T16:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"details": "Cisco has released software updates that address this vulnerability.",
"product_ids": [
"CSAFPID-284312:277516",
"CSAFPID-284313:277516",
"CSAFPID-284793:277516",
"CSAFPID-285972:277516",
"CSAFPID-286576:277516",
"CSAFPID-286577:277516",
"CSAFPID-286910:277516",
"CSAFPID-287074:277516",
"CSAFPID-287124:277516",
"CSAFPID-287182:277516",
"CSAFPID-290475:277516",
"CSAFPID-290564:277516",
"CSAFPID-290583:277516",
"CSAFPID-290662:277516",
"CSAFPID-292361:277516",
"CSAFPID-292412:277516",
"CSAFPID-292659:277516",
"CSAFPID-294798:277516",
"CSAFPID-294961:277516",
"CSAFPID-295139:277516",
"CSAFPID-295354:277516",
"CSAFPID-295499:277516",
"CSAFPID-300118:277516",
"CSAFPID-300182:277516",
"CSAFPID-300183:277516",
"CSAFPID-300511:277516",
"CSAFPID-300735:277516",
"CSAFPID-300944:277516",
"CSAFPID-300946:277516",
"CSAFPID-301110:277516",
"CSAFPID-301470:277516",
"CSAFPID-301607:277516",
"CSAFPID-301608:277516",
"CSAFPID-301637:277516",
"CSAFPID-301704:277516",
"CSAFPID-301706:277516",
"CSAFPID-302630:277516",
"CSAFPID-302687:277516",
"CSAFPID-302816:277516",
"CSAFPID-302849:277516",
"CSAFPID-302872:277516",
"CSAFPID-302967:277516",
"CSAFPID-302998:277516",
"CSAFPID-303302:277516",
"CSAFPID-303336:277516",
"CSAFPID-303351:277516",
"CSAFPID-305271:277516",
"CSAFPID-305281:277516",
"CSAFPID-305307:277516",
"CSAFPID-306550:277516",
"CSAFPID-306552:277516",
"CSAFPID-306553:277516",
"CSAFPID-306644:277516",
"CSAFPID-306645:277516",
"CSAFPID-306652:277516",
"CSAFPID-306654:277516",
"CSAFPID-306655:277516",
"CSAFPID-306658:277516",
"CSAFPID-306666:277516",
"CSAFPID-306832:277516"
],
"url": "https://software.cisco.com"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-284312:277516",
"CSAFPID-284313:277516",
"CSAFPID-284793:277516",
"CSAFPID-285972:277516",
"CSAFPID-286576:277516",
"CSAFPID-286577:277516",
"CSAFPID-286910:277516",
"CSAFPID-287074:277516",
"CSAFPID-287124:277516",
"CSAFPID-287182:277516",
"CSAFPID-290475:277516",
"CSAFPID-290564:277516",
"CSAFPID-290583:277516",
"CSAFPID-290662:277516",
"CSAFPID-292361:277516",
"CSAFPID-292412:277516",
"CSAFPID-292659:277516",
"CSAFPID-294798:277516",
"CSAFPID-294961:277516",
"CSAFPID-295139:277516",
"CSAFPID-295354:277516",
"CSAFPID-295499:277516",
"CSAFPID-300118:277516",
"CSAFPID-300182:277516",
"CSAFPID-300183:277516",
"CSAFPID-300511:277516",
"CSAFPID-300735:277516",
"CSAFPID-300944:277516",
"CSAFPID-300946:277516",
"CSAFPID-301110:277516",
"CSAFPID-301470:277516",
"CSAFPID-301607:277516",
"CSAFPID-301608:277516",
"CSAFPID-301637:277516",
"CSAFPID-301704:277516",
"CSAFPID-301706:277516",
"CSAFPID-302630:277516",
"CSAFPID-302687:277516",
"CSAFPID-302816:277516",
"CSAFPID-302849:277516",
"CSAFPID-302872:277516",
"CSAFPID-302967:277516",
"CSAFPID-302998:277516",
"CSAFPID-303302:277516",
"CSAFPID-303336:277516",
"CSAFPID-303351:277516",
"CSAFPID-305271:277516",
"CSAFPID-305281:277516",
"CSAFPID-305307:277516",
"CSAFPID-306550:277516",
"CSAFPID-306552:277516",
"CSAFPID-306553:277516",
"CSAFPID-306644:277516",
"CSAFPID-306645:277516",
"CSAFPID-306652:277516",
"CSAFPID-306654:277516",
"CSAFPID-306655:277516",
"CSAFPID-306658:277516",
"CSAFPID-306666:277516",
"CSAFPID-306832:277516"
]
}
],
"title": "Cisco Secure Firepower Management Center Software SQL Injection Vulnerability"
}
]
}
CERTFR-2026-AVI-0242
Vulnerability from certfr_avis - Published: 2026-03-05 - Updated: 2026-03-05
De multiples vulnérabilités ont été découvertes dans les produits Cisco. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et une atteinte à la confidentialité des données.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Cisco | Firewall Threat Defense | Firepower Threat Defense sans les derniers correctifs de sécurité | ||
| Cisco | Firewall Management Center | Firewall Management Center sans les derniers correctifs de sécurité | ||
| Cisco | Adaptive Security Appliance | Adaptive Security Appliance sans les derniers correctifs de sécurité |
References
| Title | Publication Time | Tags | |||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Firepower Threat Defense sans les derniers correctifs de s\u00e9curit\u00e9",
"product": {
"name": "Firewall Threat Defense",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "Firewall Management Center sans les derniers correctifs de s\u00e9curit\u00e9",
"product": {
"name": "Firewall Management Center",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "Adaptive Security Appliance sans les derniers correctifs de s\u00e9curit\u00e9",
"product": {
"name": "Adaptive Security Appliance",
"vendor": {
"name": "Cisco",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-20103",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-20103"
},
{
"name": "CVE-2026-20105",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-20105"
},
{
"name": "CVE-2026-20106",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-20106"
},
{
"name": "CVE-2026-20015",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-20015"
},
{
"name": "CVE-2026-20002",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-20002"
},
{
"name": "CVE-2026-20013",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-20013"
},
{
"name": "CVE-2026-20101",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-20101"
},
{
"name": "CVE-2026-20014",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-20014"
},
{
"name": "CVE-2026-20079",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-20079"
},
{
"name": "CVE-2026-20082",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-20082"
},
{
"name": "CVE-2026-20001",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-20001"
},
{
"name": "CVE-2026-20100",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-20100"
},
{
"name": "CVE-2026-20131",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-20131"
},
{
"name": "CVE-2026-20062",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-20062"
},
{
"name": "CVE-2026-20039",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-20039"
},
{
"name": "CVE-2026-20049",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-20049"
},
{
"name": "CVE-2026-20003",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-20003"
}
],
"initial_release_date": "2026-03-05T00:00:00",
"last_revision_date": "2026-03-05T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-0242",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-03-05T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Injection SQL (SQLi)"
},
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Cisco. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, un d\u00e9ni de service \u00e0 distance et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Cisco",
"vendor_advisories": [
{
"published_at": "2026-03-04",
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-asa-scpcxt-filecpy-rgeP73nE",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-scpcxt-filecpy-rgeP73nE"
},
{
"published_at": "2026-03-04",
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-fmc-rce-NKhnULJh",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-rce-NKhnULJh"
},
{
"published_at": "2026-03-04",
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-asaftd-vpn-m9sx6MbC",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-vpn-m9sx6MbC"
},
{
"published_at": "2026-03-04",
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-asa-dos-FCvLD6vR",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-dos-FCvLD6vR"
},
{
"published_at": "2026-03-04",
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-asaftd-ikev2-dos-eBueGdEG",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-ikev2-dos-eBueGdEG"
},
{
"published_at": "2026-03-04",
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-asaftd-esp-dos-uv7yD8P5",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-esp-dos-uv7yD8P5"
},
{
"published_at": "2026-03-04",
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-fmc-sql-injection-2qH6CcJd",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-sql-injection-2qH6CcJd"
},
{
"published_at": "2026-03-04",
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-onprem-fmc-authbypass-5JPp45V2",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-onprem-fmc-authbypass-5JPp45V2"
},
{
"published_at": "2026-03-04",
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-asaftd-vpn-dos-SpOFF2Re",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-vpn-dos-SpOFF2Re"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…