NCSC-2026-0458 Vulnerabilities Fixed in Cisco Secure Firewall ASA, Threat Defense and Management Center

As cited

Copy frozen at 2026-10-28 12:26 UTC (site build).

vulnerabilities

NCSC-2026-0458 Vulnerabilities Fixed in Cisco Secure Firewall ASA, Threat Defense and Management Center

Cisco patched eight classes of vulnerabilities across Secure Firewall ASA, Threat Defense, and Management Center products on October 28, 2026. Four of the eight CVE identifiers carry CVSS scores of 9.0 or higher, with CVE-2026-20329 and CVE-2026-20330 rated at 9.9 each. Two vulnerabilities, CVE-2026-20079 and CVE-2026-20316 in Secure Firewall Management Center, are confirmed under active exploitation.

Why it matters: Organizations running Cisco Secure Firewall products must prioritize patching CVE-2026-20329, CVE-2026-20330, CVE-2026-20331, and CVE-2026-20332 due to high CVSS scores and network-exploitable attack paths; CVE-2026-20079 and CVE-2026-20316 require immediate remediation given active in-the-wild attacks.

Source published

2026-10-28 10:28 UTC

First seen by Cybersecurity Tracker

2026-10-28 11:01 UTC