Skip to content
CVE PROGRAM SOURCE RECORD6.0 Medium

CVE-2026-20008

Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Lua Code Injection Vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
cisco

Description

A vulnerability in a small subset of CLI commands that are used on Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an authenticated, local attacker to craft Lua code that could be used on the underlying operating system as root. This vulnerability exists because user-provided input is not properly sanitized. An attacker could exploit this vulnerability by crafting valid Lua code and submitting it as a malicious parameter for a CLI command. A successful exploit could allow the attacker to inject Lua code, which could lead to arbitrary code execution as the root user. To exploit this vulnerability, an attacker must have valid Administrator credentials.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software

Default version status: unknown

  • 9.12.3affected
  • 9.12.1affected
  • 9.12.2affected
  • 9.12.4affected
  • 9.12.3.2affected
  • 9.12.3.7affected
  • 9.12.2.5affected
  • 9.12.3.12affected
  • 9.12.1.3affected
  • 9.12.2.4affected
  • 9.12.1.2affected
  • 9.12.2.9affected
  • 9.12.3.9affected
  • 9.12.2.1affected
  • 9.12.4.2affected
  • 9.12.4.4affected
  • 9.12.4.7affected
  • 9.12.4.8affected
  • 9.12.4.10affected
  • 9.12.4.13affected
  • 9.12.4.18affected
  • 9.12.4.24affected
  • 9.16.1affected
  • 9.12.4.26affected
  • 9.16.1.28affected
  • 9.12.4.29affected
  • 9.16.2affected
  • 9.12.4.30affected
  • 9.16.2.3affected
  • 9.12.4.35affected
  • 9.16.2.7affected
  • 9.12.4.37affected
  • 9.17.1affected
  • 9.16.2.11affected
  • 9.16.2.13affected
  • 9.12.4.39affected
  • 9.12.4.38affected
  • 9.16.2.14affected
  • 9.17.1.7affected
  • 9.12.4.40affected
  • 9.16.3.3affected
  • 9.16.3affected
  • 9.16.3.14affected
  • 9.17.1.9affected
  • 9.12.4.41affected
  • 9.17.1.10affected
  • 9.18.1affected
  • 9.12.4.47affected
  • 9.16.3.15affected
  • 9.18.1.3affected
  • 9.17.1.11affected
  • 9.12.4.48affected
  • 9.18.2affected
  • 9.16.3.19affected
  • 9.17.1.13affected
  • 9.12.4.50affected
  • 9.17.1.15affected
  • 9.12.4.52affected
  • 9.16.3.23affected
  • 9.18.2.5affected
  • 9.16.4affected
  • 9.12.4.54affected
  • 9.17.1.20affected
  • 9.18.2.7affected
  • 9.19.1affected
  • 9.16.4.9affected
  • 9.12.4.55affected
  • 9.18.2.8affected
  • 9.16.4.14affected
  • 9.18.3affected
  • 9.19.1.5affected
  • 9.12.4.56affected
  • 9.17.1.30affected
  • 9.19.1.9affected
  • 9.18.3.39affected
  • 9.16.4.19affected
  • 9.12.4.58affected
  • 9.19.1.12affected
  • 9.18.3.46affected
  • 9.16.4.27affected
  • 9.19.1.18affected
  • 9.18.3.53affected
  • 9.18.3.55affected
  • 9.16.4.38affected
  • 9.17.1.33affected
  • 9.12.4.62affected
  • 9.16.4.39affected
  • 9.18.3.56affected
  • 9.20.1affected
  • 9.16.4.42affected
  • 9.19.1.22affected
  • 9.18.4affected
  • 9.20.1.5affected
  • 9.18.4.5affected
  • 9.19.1.24affected
  • 9.16.4.48affected
  • 9.18.4.8affected
  • 9.20.2affected
  • 9.19.1.27affected
  • 9.12.4.65affected
  • 9.16.4.55affected
  • 9.18.4.22affected
  • 9.20.2.10affected
  • 9.16.4.57affected
  • 9.19.1.28affected
  • 9.17.1.39affected
  • 9.12.4.67affected
  • 9.18.4.24affected
  • 9.20.2.21affected
  • 9.16.4.61affected
  • 9.19.1.31affected
  • 9.18.4.29affected
  • 9.20.2.22affected
  • 9.16.4.62affected
  • 9.18.4.34affected
  • 9.20.3affected
  • 9.16.4.67affected
  • 9.16.4.70affected
  • 9.18.4.40affected
  • 9.23.1affected
  • 9.22.1.1affected
  • 9.16.4.71affected
  • 9.20.3.4affected
  • 9.18.4.47affected
  • 9.20.3.7affected
  • 9.17.1.45affected
  • 9.19.1.37affected
  • 9.17.1.46affected
  • 9.16.4.76affected
  • 9.20.3.9affected
  • 9.19.1.38affected
  • 9.18.4.50affected
  • 9.22.1.3affected
  • 9.20.3.10affected
  • 9.22.1.2affected
  • 9.18.4.52affected
  • 9.20.3.13affected
  • 9.22.1.6affected
  • 9.18.4.53affected
  • 9.16.4.82affected
  • 9.22.2affected
  • 9.20.3.16affected
  • 9.19.1.42affected
  • 9.18.4.57affected
  • 9.16.4.84affected
  • 9.23.1.3affected
  • 9.20.3.20affected

Cisco Cisco Secure Firewall Threat Defense (FTD) Software

Default version status: unknown

  • 6.4.0.1affected
  • 6.4.0.2affected
  • 6.4.0.5affected
  • 6.4.0affected
  • 6.4.0.3affected
  • 6.4.0.4affected
  • 6.4.0.6affected
  • 6.4.0.7affected
  • 6.4.0.8affected
  • 6.4.0.9affected
  • 6.4.0.10affected
  • 6.4.0.11affected
  • 6.4.0.12affected
  • 7.0.0affected
  • 7.0.0.1affected
  • 7.0.1affected
  • 7.1.0affected
  • 6.4.0.13affected
  • 7.0.1.1affected
  • 6.4.0.14affected
  • 7.1.0.1affected
  • 7.0.2affected
  • 6.4.0.15affected
  • 7.2.0affected
  • 7.0.2.1affected
  • 7.0.3affected
  • 7.1.0.2affected
  • 7.2.0.1affected
  • 7.0.4affected
  • 7.2.1affected
  • 7.0.5affected
  • 6.4.0.16affected
  • 7.3.0affected
  • 7.2.2affected
  • 7.2.3affected
  • 7.3.1affected
  • 7.1.0.3affected
  • 7.2.4affected
  • 7.0.6affected
  • 7.2.5affected
  • 7.2.4.1affected
  • 7.3.1.1affected
  • 7.4.0affected
  • 6.4.0.17affected
  • 7.0.6.1affected
  • 7.2.5.1affected
  • 7.4.1affected
  • 7.2.6affected
  • 7.0.6.2affected
  • 7.4.1.1affected
  • 6.4.0.18affected
  • 7.2.7affected
  • 7.2.5.2affected
  • 7.3.1.2affected
  • 7.2.8affected
  • 7.6.0affected
  • 7.4.2affected
  • 7.2.8.1affected
  • 7.0.6.3affected
  • 7.4.2.1affected
  • 7.2.9affected
  • 7.0.7affected
  • 7.7.0affected
  • 7.4.2.2affected
  • 7.2.10affected
  • 7.6.1affected
  • 7.4.2.3affected
  • 7.0.8affected
  • 7.6.2affected
  • 7.7.10affected
  • 7.0.8.1affected
  • 7.6.2.1affected
  • 7.7.10.1affected
  • 7.4.2.4affected
  • 7.2.10.2affected

References