Improper Access Control in Cisco Secure Firewall ASA Software

CVE-2026-20062

What is CVE-2026-20062?

A vulnerability in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software enables an authenticated local attacker with administrative privileges in one context to exploit improper access controls for Secure Copy Protocol (SCP) operations. This flaw allows the attacker to copy files to or from another context, potentially compromising sensitive configuration files. To successfully execute an attack, the attacker must have valid administrative credentials for a non-admin context and must issue specific SCP copy commands, aware of the exact file path, which limits the attack surface slightly but still poses a significant risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References