Kenyan organisations using Cisco Secure Firewall ASA or FTD equipment should urgently review their exposure to CVE-2026-20349.
The vulnerability affects remote-access services and can be triggered through a crafted unauthenticated HTTP request, potentially causing an affected device to reload and disrupting services.
Cisco firewalls and VPN gateways are widely used to protect organisational networks and provide secure remote access. Their position at the network perimeter makes vulnerabilities affecting them particularly significant.
Government agencies, businesses, financial institutions and other organisations operating ASA or FTD environments should identify internet-facing devices, apply the appropriate vendor updates or hotfixes and review logs for unexplained reloads or suspicious HTTP activity.
Remote-access infrastructure should also be routinely inventoried and monitored rather than treated as equipment that only requires attention when it fails.
Security devices are themselves part of the attack surface and must be protected accordingly.