onyx

onyx --cves cve-2026-20349

CVE-2026-20349

HIGHKEVPOCBUZZ 1Cisco ASA
score
13.9
cvss
8.6
epss
1.0%
published
2026-08-11
kev added
2026-08-11
first seen

Cisco Secure Firewall ASA and FTD contain a denial of service vulnerability caused by insufficient error checking in Remote Access SSL VPN HTTP request processing, letting unauthenticated remote attackers cause device reloads, exploit requires crafted HTTP request.

Timeline

How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.

events2026-08-11 — PublishedP2026-08-11 — Added to CISA KEVK2026-10-18 — First GitHub repository: ekacs/predicted-cve-2026-20349 — Panduan Praktikum Edukasi: Deteksi Versi Cisco ASA & FTD (CVE-2026-20349) · new repositoryG2026-10-21 — Tracked by OnyxT2026-10-21 — Public PoCXscore2026-10-21: score 13.913.9epss2026-09-22: epss 2.2%2026-09-23: epss 2.2%2026-09-24: epss 1.0%2026-09-25: epss 1.0%2026-09-26: epss 1.0%2026-09-27: epss 1.0%2026-09-29: epss 1.0%2026-09-30: epss 1.0%2026-10-01: epss 1.0%2026-10-02: epss 1.0%2026-10-03: epss 1.0%2026-10-04: epss 1.0%2026-10-05: epss 1.0%2026-10-06: epss 1.0%2026-10-07: epss 1.0%2026-10-08: epss 1.0%2026-10-09: epss 1.0%2026-10-10: epss 1.0%2026-10-11: epss 1.0%2026-10-12: epss 1.0%2026-10-13: epss 1.0%2026-10-14: epss 1.0%2026-10-15: epss 1.0%2026-10-16: epss 1.0%2026-10-18: epss 1.0%2026-10-19: epss 1.0%2026-10-20: epss 1.0%2026-10-21: epss 1.0%1.0%mentions/day2026-10-18: mentions/day 102026-09-22today
  1. Published
  2. Added to CISA KEV
  3. First GitHub repository ekacs/predicted-cve-2026-20349 — Panduan Praktikum Edukasi: Deteksi Versi Cisco ASA & FTD (CVE-2026-20349) · new repository
  4. Tracked by Onyx
  5. Public PoC

Community

1 mentions this week · GH 1

GitHub repositories 1

Exploit availability

Public PoC flagged by vulnx; no direct exploit link among the citations.

Weaknesses

CWE-244

References 7