CVE-2026-20039 | Cisco Secure Firewall Adaptive Security Appliance Software VPN Web Server heap inspection (cisco-sa-asaftd-vpn-dos-SpOFF2Re)

A vulnerability was found in Cisco Secure Firewall Adaptive Security Appliance Software and Secure Firewall Threat Defense Software. It has been declared as critical. This affects an unknown function of the component VPN Web Server. The manipulation results in improper clearing of heap memory before release.

This vulnerability is cataloged as CVE-2026-20039. The attack may be launched remotely. There is no exploit available.

It is recommended to upgrade the affected component.