GCVE-110-NCSC-2026-295

Advisory PublishedCVSS 8.6/10

Vulnetix · Advisory published August 12, 2026

A heap inspection vulnerability in Cisco Secure Firewall ASA and FTD's Remote Access SSL VPN service allows unauthenticated remote attackers to send crafted HTTP requests causing device reloads and denial of service.

Download JSON Open in Console

Weaknesses (CWE)

CWE-244Improper Clearing of Heap Memory Before Release ('Heap Inspection')

Risk Scores

CVSS 3.1

8.6/10

High · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Affected Products

Vendor	Product	Versions	Platforms
Cisco	vers:unknown/*	—	—

Aliases

CVE-2026-20349

References

advisory

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON