CVE-2026-20009

score

<0.1

cvss

5.3

epss

0.4%

published

2026-03-04

kev added

—

first seen

2026-10-21

Cisco Secure Firewall Adaptive Security Appliance (ASA) Software contains an authentication bypass caused by insufficient validation of user input during SSH key-based authentication, letting unauthenticated remote attackers log in as specific users without private keys, exploit requires valid username and associated public key.