Cisco Warns of Exploited ASA, FTD VPN Flaw

Cisco warns that CVE-2026-20349, a high-severity denial-of-service flaw in Secure Firewall ASA and FTD software, is actively exploited to crash devices via crafted HTTP requests to Remote Access SSL VPN. Hot fixes exist for ASA 9.16 through 9.24 and FTD 7.0 through 10.0; no workarounds are available.