Cisco
CVE-2026-20235: Cisco Identity Services Engine Information Disclosure Vulnerability
An ISE administrator can retrieve sensitive information, including credential hashes, through a crafted API request. Apply the CVE-specific patch and scope suspected exposure; disclosed hashes do not establish direct plaintext-password recovery.
CVE-2026-20237: Cisco ISE hardening: Input Validation Vulnerabilities
Cisco's ISE and ISE-PIC hardening entry covers input-validation and path-handling weaknesses without a specific file-access mechanism. Follow product-specific patch guidance; the body retains conflicting published scores rather than resolving them by assumption.
CVE-2024-20260: Cisco ASA and FTD SSL VPN denial-of-service scope expansion
SSL/TLS connection floods can exhaust memory on affected hardware or virtual ASA and FTD appliances. Check SSL VPN or management HTTP configuration and obtain the CVE-specific fixed release; reloading restores service, not the software fix.
CVE-2026-20071: Cisco ISE Session Takeover Vulnerability
An adjacent-network attacker can hijack Cisco ISE BYOD onboarding and enter a protected 802.1X network. Review that workflow and install this CVE's branch-specific patch; the companion administrator export flaw has different fixes.
CVE-2026-20072: Cisco ISE Information Disclosure Vulnerability
Cisco ISE administrators with user-management rights can export users outside their assigned group and reveal normally hidden passwords. Review those permissions and apply this CVE's patch; the flaw is not unauthenticated password access.
CVE-2026-20120: Cisco FTD ACL bypass vulnerability
ASA and FTD access lists using Object Group Search can allow traffic that should be blocked. Check both release and configuration, then obtain this CVE's First Fixed release through Cisco Software Checker.
CVE-2026-20121: Cisco FTD Bypass Access List
Object Group Search can expose vulnerable ASA and FTD access lists to unauthorized traffic. Match configuration and release using CVE-2026-20121; the paired advisory does not establish a distinct mechanism for each listed CVE.
CVE-2026-20130: Cisco ISE hardening: Improper Neutralization Vulnerabilities
Cisco's ISE and ISE-PIC hardening entry identifies an injection-related weakness without disclosing a specific interface. Match the product and patch table, retaining legacy Critical-only limits and the separate ISE-PIC support boundary.
CVE-2026-20135: Cisco Secure Firewall Threat Defense Software TLS 1.3 Denial of Service Vulnerability
A crafted packet can crash LINA and reload vulnerable FTD devices with TLS 1.3-enabled listeners. Check both conditions, evaluate Cisco's temporary TLS restriction for compatibility, and install the platform-specific fixed software.
CVE-2026-20154: Cisco Secure Firewall Adaptive Security Appliance Software and Secure Firewall Threat Defense Software Logging Denial of Service
SYN-packet floods can overload ASA and FTD processing of syslog message 419002. Check logging configuration, evaluate Cisco's message-specific rate limit, and install fixed software; do not disable all security logging as a substitute.