{"schema":"vulnpedia.research/1","cve":"CVE-2026-20349","references":[{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-vpn-dos-dzv4mQFF","tags":["Vendor Advisory","KEV report"],"source":"mitre","sourceId":"cisco","modified":"2026-09-16T20:15:35.860Z","origins":[{"source":"mitre","sourceId":"cisco","modified":"2026-09-16T20:15:35.860Z","url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-vpn-dos-dzv4mQFF"},{"source":"nvd","sourceId":"CVE-2026-20349","modified":"2026-09-16T21:17:12.103","url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-vpn-dos-dzv4mQFF"},{"source":"vulncheck-kev","sourceId":"CVE-2026-20349","modified":"2026-08-11T00:00:00Z","url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-vpn-dos-dzv4mQFF"}]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-20349","tags":["government-resource","US Government Resource"],"source":"mitre","sourceId":"CISA-ADP","modified":"2026-08-12T04:00:28.075Z","origins":[{"source":"mitre","sourceId":"CISA-ADP","modified":"2026-08-12T04:00:28.075Z","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-20349"},{"source":"nvd","sourceId":"CVE-2026-20349","modified":"2026-09-16T21:17:12.103","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-20349"}]},{"source":"euvd","sourceId":"EUVD-2026-56643","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-56643","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-56643","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-56643"}]},{"url":"https://vulncheck.com/kev","tags":["ADVISORY"],"source":"vulncheck-kev","sourceId":"CVE-2026-20349","modified":"2026-08-11T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-20349","modified":"2026-08-11T00:00:00Z","url":"https://vulncheck.com/kev"}]},{"url":"https://previdian.com/CVE-2026-20349","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-20349","modified":"2026-08-11T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-20349","modified":"2026-08-11T00:00:00Z","url":"https://previdian.com/CVE-2026-20349"}]},{"url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-20349","modified":"2026-08-11T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-20349","modified":"2026-08-11T00:00:00Z","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"}]},{"url":"https://www.hkcert.org/security-bulletin/cisco-products-multiple-vulnerabilities_20260812","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-20349","modified":"2026-08-11T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-20349","modified":"2026-08-11T00:00:00Z","url":"https://www.hkcert.org/security-bulletin/cisco-products-multiple-vulnerabilities_20260812"}]},{"url":"https://eclypsium.com/blog/cve-2026-20349-someone-is-crashing-cisco-firewalls-we-need-to-talk-about-why/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-20349","modified":"2026-08-11T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-20349","modified":"2026-08-11T00:00:00Z","url":"https://eclypsium.com/blog/cve-2026-20349-someone-is-crashing-cisco-firewalls-we-need-to-talk-about-why/"}]},{"url":"https://cydome.io/maritime-cybersecurity-bulletin-august-21st-2026/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-20349","modified":"2026-08-11T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-20349","modified":"2026-08-11T00:00:00Z","url":"https://cydome.io/maritime-cybersecurity-bulletin-august-21st-2026/"}]},{"url":"https://www.recordedfuture.com/blog/august-2026-cve-landscape","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-20349","modified":"2026-08-11T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-20349","modified":"2026-08-11T00:00:00Z","url":"https://www.recordedfuture.com/blog/august-2026-cve-landscape"}]}],"packages":[],"pocCandidates":[{"url":"https://github.com/ekacs/predicted-cve-2026-20349","source":"poc-in-github","sourceId":"CVE-2026-20349","description":"Panduan Praktikum Edukasi: Deteksi Versi Cisco ASA & FTD (CVE-2026-20349)","modified":"2026-10-18T12:10:56Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-20349","url":"https://github.com/ekacs/predicted-cve-2026-20349"},{"source":"poc-in-github","sourceId":"CVE-2026-20349","modified":"2026-10-18T12:10:56Z","url":"https://github.com/ekacs/predicted-cve-2026-20349"}],"tags":[]}],"cataloguedPoc":[],"vendorStatements":[],"exploitationSources":[{"source":"vulncheck-kev","sourceId":"CVE-2026-20349","catalog":"VulnCheck KEV","kind":"catalogue","url":"https://vulncheck.com/kev","dateAdded":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:00:00Z","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","knownRansomwareCampaignUse":"Unknown","reportedByVulncheckCanaries":false,"vendorProject":"Cisco","product":"Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) ","dueDate":"2026-08-14T00:00:00Z","cisaDateAdded":"2026-08-11T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-20349","modified":"2026-08-11T00:00:00Z","url":"https://vulncheck.com/kev"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-20349","catalog":"VulnCheck KEV","kind":"report","url":"https://previdian.com/CVE-2026-20349","dateAdded":"2026-08-11T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-20349","url":"https://previdian.com/CVE-2026-20349"},{"source":"vulncheck-kev","sourceId":"CVE-2026-20349","url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-vpn-dos-dzv4mQFF"},{"source":"vulncheck-kev","sourceId":"CVE-2026-20349","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-20349","catalog":"VulnCheck KEV","kind":"report","url":"https://www.hkcert.org/security-bulletin/cisco-products-multiple-vulnerabilities_20260812","dateAdded":"2026-08-12T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-20349","url":"https://www.hkcert.org/security-bulletin/cisco-products-multiple-vulnerabilities_20260812"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-20349","catalog":"VulnCheck KEV","kind":"report","url":"https://eclypsium.com/blog/cve-2026-20349-someone-is-crashing-cisco-firewalls-we-need-to-talk-about-why/","dateAdded":"2026-08-19T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-20349","url":"https://eclypsium.com/blog/cve-2026-20349-someone-is-crashing-cisco-firewalls-we-need-to-talk-about-why/"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-20349","catalog":"VulnCheck KEV","kind":"report","url":"https://cydome.io/maritime-cybersecurity-bulletin-august-21st-2026/","dateAdded":"2026-08-21T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-20349","url":"https://cydome.io/maritime-cybersecurity-bulletin-august-21st-2026/"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-20349","catalog":"VulnCheck KEV","kind":"report","url":"https://www.recordedfuture.com/blog/august-2026-cve-landscape","dateAdded":"2026-09-08T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-20349","url":"https://www.recordedfuture.com/blog/august-2026-cve-landscape"}]}]}