Our takeCisco advisory AV26-807 flags active exploitation in multiple versions of ASA and FTD Software. Patch now if you run these yourself.Cyber Resilience desk
Sources (1)
- cccs · cccs
What this means for you — Security leader:Cisco advisory AV26-807 reports active exploitation in multiple versions of ASA and FTD Software. Review the advisory, apply available patches or mitigations immediately, and audit exposed management interfaces.
What this means for you — Lean IT orgs:If you run Cisco Secure Firewall ASA or FTD, check the advisory at cyber.gc.ca and update or follow the workarounds right away. Most lean-IT teams should also limit public access to the firewall management interface.
What this means for you — MSP:Audit all client Cisco ASA and FTD deployments against advisory AV26-807; prioritize patching or mitigation and restrict management access where possible.
What this means for you — Researcher:Cisco advisory AV26-807 (active exploitation confirmed by CCCS) affects multiple ASA and FTD versions. Review the linked guidance for affected versions, patches, and mitigations.