CVE-2026-20120

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-20120", "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "state": "PUBLISHED", "assignerShortName": "cisco", "dateReserved": "2025-10-08T11:59:15.377Z", "datePublished": "2026-09-16T20:19:12.537Z", "dateUpdated": "2026-09-18T19:08:46.057Z"}, "containers": {"cna": {"title": "Cisco FTD ACL bypass vulnerability", "metrics": [{"format": "cvssV3_1", "cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N", "baseScore": 5.8, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "CHANGED", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "availabilityImpact": "NONE"}}], "descriptions": [{"lang": "en", "value": "A vulnerability in the access control list (ACL) Object Group Search (OGS) implementation of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass configured access controls.\r\n\r\nThis vulnerability is due to a logic error in populating group access control policies (ACPs) with OGS configured. An attacker could exploit this vulnerability by sending traffic that should be blocked through the device. A successful exploit could allow the attacker to bypass access controls and reach devices in protected networks."}], "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-acl-bypass-8p6vFvw", "name": "cisco-sa-ftd-acl-bypass-8p6vFvw"}], "exploits": [{"lang": "en", "value": "The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."}], "source": {"advisory": "cisco-sa-ftd-acl-bypass-8p6vFvw", "discovery": "INTERNAL", "defects": ["CSCwr04957"]}, "problemTypes": [{"descriptions": [{"lang": "en", "description": "Improper Access Control", "type": "cwe", "cweId": "CWE-284"}]}], "affected": [{"vendor": "Cisco", "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "versions": [{"version": "9.23.1", "status": "affected"}, {"version": "9.22.1.1", "status": "affected"}, {"version": "9.22.1.3", "status": "affected"}, {"version": "9.22.1.2", "status": "affected"}, {"version": "9.22.1.6", "status": "affected"}, {"version": "9.22.2", "status": "affected"}, {"version": "9.23.1.3", "status": "affected"}, {"version": "9.22.2.4", "status": "affected"}, {"version": "9.23.1.7", "status": "affected"}, {"version": "9.22.2.9", "status": "affected"}, {"version": "9.23.1.13", "status": "affected"}, {"version": "9.22.2.13", "status": "affected"}, {"version": "9.23.1.19", "status": "affected"}, {"version": "9.22.2.14", "status": "affected"}, {"version": "9.23.1.22", "status": "affected"}, {"version": "9.22.2.20", "status": "affected"}], "defaultStatus": "unknown"}, {"vendor": "Cisco", "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "versions": [{"version": "7.6.0", "status": "affected"}, {"version": "7.7.0", "status": "affected"}, {"version": "7.6.1", "status": "affected"}, {"version": "7.6.2", "status": "affected"}, {"version": "7.7.10", "status": "affected"}, {"version": "7.7.11", "status": "affected"}, {"version": "7.6.2.1", "status": "affected"}, {"version": "7.7.10.1", "status": "affected"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "shortName": "cisco", "dateUpdated": "2026-09-18T19:08:46.057Z"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-09-17T16:03:41.816941Z", "id": "CVE-2026-20120", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-09-17T16:03:51.646Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-20120", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-09-17T16:03:41.816941Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-09-17T16:03:46.919Z"}}], "cna": {"title": "Cisco FTD ACL bypass vulnerability", "source": {"defects": ["CSCwr04957"], "advisory": "cisco-sa-ftd-acl-bypass-8p6vFvw", "discovery": "INTERNAL"}, "metrics": [{"format": "cvssV3_1", "cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 5.8, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}], "affected": [{"vendor": "Cisco", "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "versions": [{"status": "affected", "version": "9.23.1"}, {"status": "affected", "version": "9.22.1.1"}, {"status": "affected", "version": "9.22.1.3"}, {"status": "affected", "version": "9.22.1.2"}, {"status": "affected", "version": "9.22.1.6"}, {"status": "affected", "version": "9.22.2"}, {"status": "affected", "version": "9.23.1.3"}, {"status": "affected", "version": "9.22.2.4"}, {"status": "affected", "version": "9.23.1.7"}, {"status": "affected", "version": "9.22.2.9"}, {"status": "affected", "version": "9.23.1.13"}, {"status": "affected", "version": "9.22.2.13"}, {"status": "affected", "version": "9.23.1.19"}, {"status": "affected", "version": "9.22.2.14"}, {"status": "affected", "version": "9.23.1.22"}, {"status": "affected", "version": "9.22.2.20"}], "defaultStatus": "unknown"}, {"vendor": "Cisco", "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "versions": [{"status": "affected", "version": "7.6.0"}, {"status": "affected", "version": "7.7.0"}, {"status": "affected", "version": "7.6.1"}, {"status": "affected", "version": "7.6.2"}, {"status": "affected", "version": "7.7.10"}, {"status": "affected", "version": "7.7.11"}, {"status": "affected", "version": "7.6.2.1"}, {"status": "affected", "version": "7.7.10.1"}], "defaultStatus": "unknown"}], "exploits": [{"lang": "en", "value": "The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."}], "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-acl-bypass-8p6vFvw", "name": "cisco-sa-ftd-acl-bypass-8p6vFvw"}], "descriptions": [{"lang": "en", "value": "A vulnerability in the access control list (ACL) Object Group Search (OGS) implementation of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass configured access controls.\r\n\r\nThis vulnerability is due to a logic error in populating group access control policies (ACPs) with OGS configured. An attacker could exploit this vulnerability by sending traffic that should be blocked through the device. A successful exploit could allow the attacker to bypass access controls and reach devices in protected networks."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "cwe", "cweId": "CWE-284", "description": "Improper Access Control"}]}], "providerMetadata": {"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "shortName": "cisco", "dateUpdated": "2026-09-18T19:08:46.057Z"}}}, "cveMetadata": {"cveId": "CVE-2026-20120", "state": "PUBLISHED", "dateUpdated": "2026-09-18T19:08:46.057Z", "dateReserved": "2025-10-08T11:59:15.377Z", "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "datePublished": "2026-09-16T20:19:12.537Z", "assignerShortName": "cisco"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unknown", "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "vendor": "Cisco", "versions": [{"status": "affected", "version": "9.23.1"}, {"status": "affected", "version": "9.22.1.1"}, {"status": "affected", "version": "9.22.1.3"}, {"status": "affected", "version": "9.22.1.2"}, {"status": "affected", "version": "9.22.1.6"}, {"status": "affected", "version": "9.22.2"}, {"status": "affected", "version": "9.23.1.3"}, {"status": "affected", "version": "9.22.2.4"}, {"status": "affected", "version": "9.23.1.7"}, {"status": "affected", "version": "9.22.2.9"}, {"status": "affected", "version": "9.23.1.13"}, {"status": "affected", "version": "9.22.2.13"}, {"status": "affected", "version": "9.23.1.19"}, {"status": "affected", "version": "9.22.2.14"}, {"status": "affected", "version": "9.23.1.22"}, {"status": "affected", "version": "9.22.2.20"}]}, {"defaultStatus": "unknown", "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "vendor": "Cisco", "versions": [{"status": "affected", "version": "7.6.0"}, {"status": "affected", "version": "7.7.0"}, {"status": "affected", "version": "7.6.1"}, {"status": "affected", "version": "7.6.2"}, {"status": "affected", "version": "7.7.10"}, {"status": "affected", "version": "7.7.11"}, {"status": "affected", "version": "7.6.2.1"}, {"status": "affected", "version": "7.7.10.1"}]}], "source": "psirt@cisco.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A vulnerability in the access control list (ACL) Object Group Search (OGS) implementation of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass configured access controls.\r\n\r\nThis vulnerability is due to a logic error in populating group access control policies (ACPs) with OGS configured. An attacker could exploit this vulnerability by sending traffic that should be blocked through the device. A successful exploit could allow the attacker to bypass access controls and reach devices in protected networks."}], "id": "CVE-2026-20120", "lastModified": "2026-09-18T13:28:28.567", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 1.4, "source": "psirt@cisco.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-20120", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-09-17T16:03:41.816941Z", "version": "2.0.3"}}]}, "published": "2026-09-16T21:17:07.343", "references": [{"source": "psirt@cisco.com", "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-acl-bypass-8p6vFvw"}], "sourceIdentifier": "psirt@cisco.com", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-284"}], "source": "psirt@cisco.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "9.23.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "9.22.1.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "9.22.1.3"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "9.22.1.2"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "9.22.1.6"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "9.22.2"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "9.23.1.3"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "9.22.2.4"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "9.23.1.7"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "9.22.2.9"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "9.23.1.13"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "9.22.2.13"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "9.23.1.19"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "9.22.2.14"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "9.23.1.22"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "9.22.2.20"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "source": "cna", "vendor": "Cisco"}, "product": "adaptive_security_appliance_software", "vendor": "cisco"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.6.0"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.7.0"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.6.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.6.2"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.7.10"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.7.11"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "7.6.2.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "7.7.10.1"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "Cisco Secure Firewall Threat Defense (FTD) Software", "source": "cna", "vendor": "Cisco"}, "product": "secure_firewall_threat_defense", "vendor": "cisco"}], "created": "2026-09-18T00:15:13.550111+00:00", "updated": "2026-09-18T21:51:03.811969+00:00", "vendors": ["cisco", "cisco$PRODUCT$adaptive_security_appliance_software", "cisco$PRODUCT$secure_firewall_threat_defense"]}