New Cisco Remote Access SSL VPN Vulnerabilities Released
The Canadian Centre for Cyber Security released advisories regarding multiple vulnerabilities affecting Cisco ASA and FTD firewalls running remote access SSL VPN, IKEv2 remote access, or zero trust network access (CVE-2026-20349). These exploits rely on heap inspection (CWE-244). Exploits have been detected in the wild so please take note if you run any of these services available on the public internet.
Cisco has confirmed that Cisco Secure Firewall Management Center (FMC) Software is not affected by this vulnerability.
You can protect your network by upgrading your devices to the following versions if you are running any of the affected services:
| Affected Product | Affected Version | Fixed Version |
|---|---|---|
| Cisco ASA | 9.16.x | 9.16.4.50 |
| Cisco ASA | 9.18.x | 9.18.4.50 |
| Cisco ASA | 9.20.x | 9.20.4.235 |
| Cisco ASA | 9.22.x | 9.22.3.191 |
| Cisco ASA | 9.23.x | 9.23.1.211 |
| Cisco ASA | 9.24.x | 9.24.1.221 |
| Cisco Secure Firewall FTD Software | 7.0.x | 7.0.9.1 Hotfix |
| Cisco Secure Firewall FTD Software | 7.2.x | 7.2.11.1 Hotfix |
| Cisco Secure Firewall FTD Software | 7.4.x | 7.4.7.1 Hotfix |
| Cisco Secure Firewall FTD Software | 7.6.x | 7.6.4.1 Hotfix |
| Cisco Secure Firewall FTD Software | 7.7.x | 7.7.11.1 Hotfix |
| Cisco Secure Firewall FTD Software | 10.0.x | 10.0.0/1 Hotfix |
For more information on CVE-2026-20349, see https://www.cve.org/CVERecord?id=CVE-2026-20349
For more information on Heap Inspection (the Improper Clearing of Heap Memore Before Release, see https://cwe.mitre.org/data/definitions/244.html
CCCS' advisory is available at https://www.cyber.gc.ca/en/alerts-advisories/cisco-security-advisory-av26-807
For more information on vulnerability details, affected versions, and fixed software, please see Cisco’s PSIRT advisories:
It is recommended that you install these patches as soon as possible if you are running an affected version. Fixed software is available from Cisco provided you have a valid support contract on the affected devices.
General guidance for protecting your environment is available from the Canadian Centre for Cyber Security.