CVE-2026-20332: Cisco ASA, FTD, and FMC hardening: Improper Access Control Vulnerabilities
Cisco's ASA, FTD and FMC access-control hardening category has conflicting published scores. Check affected ASA hotfixes and fixed releases, while distinguishing separately reported exploited FMC vulnerabilities from direct exploitation of this group.
CVE-2026-20331: Cisco ASA, FTD, and FMC hardening: Protection Mechanism Failure Vulnerabilities
Cisco's ASA, FTD and FMC hardening update groups protection-mechanism failures without detailing an individual exploit sequence. Fixed-release selection must account for affected ASA hotfixes, including builds with numerically higher suffixes.
CVE-2026-20330: Cisco ASA, FTD, and FMC hardening: Improper Neutralization Vulnerabilities
ASA, FTD and FMC hardening covers structured data handled unsafely between components, without a disclosed parser or injection path. Match the release table and ASA hotfix exceptions rather than relying on a higher build number.
CVE-2026-20329: Cisco ASA, FTD, and FMC hardening: Exceptional Conditions Handling Vulnerabilities
Cisco's ASA, FTD and FMC hardening entry addresses unsafe handling of unexpected program states. Follow product-and-release guidance, including affected ASA hotfix exceptions; the brief category does not establish a universal protocol-specific crash sequence.
CVE-2026-20326: Cisco Nexus Dashboard hardening: Missing Authentication for Critical Function
Cisco identifies a Nexus Dashboard function missing authentication but does not name the operation. Verify the Dashboard fixed release or migration path; updating managed switches does not establish that the Dashboard itself is patched.
CVE-2026-20325: Cisco Nexus Dashboard hardening: Improper Neutralization of Special Elements used in a Command
Nexus Dashboard hardening addresses command, code and template-injection risks without identifying a particular endpoint. Follow the Dashboard release or migration path; the category score does not establish one universal exploit sequence.
CVE-2026-20324: Cisco Secure Firewall Management Center sftunnel Root Arbitrary Code Execution Vulnerability
With valid credentials and a registered or hijacked sftunnel connection, an attacker can write a file that executes as root on FMC. Check peers and tunnel state, preserve evidence, and install the specific fix.
CVE-2026-20323: Cisco Secure FMC Software and Secure FTD Software sftunnel Unauthorized Authentication Bypass Vulnerability
An adjacent-network attacker can impersonate an sftunnel peer and obtain root-equivalent manager access while the legitimate tunnel is down or disrupted. Update FMC and FTD, preserving peer-registration and interruption evidence for separate investigation.
CVE-2026-20322: Cisco Nexus Dashboard hardening: Improper Access Control
Cisco's Nexus Dashboard hardening entry covers improper access control without identifying an endpoint or account boundary. Check the Dashboard release itself and follow its fixed-build or migration guidance, not the version of a managed switch.
CVE-2026-20309: Cisco Identity Services Engine Cross-Site Scripting Vulnerability
An attacker can lure an ISE management user into clicking a crafted link that runs script in the trusted interface. Apply the CVE-specific patch; user interaction is required for this reflected cross-site scripting path.