{"metadata": {"vulnerability": "CVE-2026-20331", "count": 38, "kinds": {"milestone": 9, "sighting": 7, "kev": 0, "other": 22}}, "data": [{"timestamp": "2025-08-04T16:30:00Z", "date_only": false, "value": "2025-08-04T16:30:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0458", "record": "NCSC-2026-0458", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2025-10-08T11:59:15.412Z", "date_only": false, "value": "2025-10-08T11:59:15.412Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-20331", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-09-16T00:00:00Z", "date_only": true, "value": "2026-09-16", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1197", "record": "CERTFR-2026-AVI-1197", "field": "vendor_advisories.0.published_at", "linked_record": true}, {"timestamp": "2026-09-16T00:00:00Z", "date_only": false, "value": "2026-09-16T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-20331", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-09-16T00:00:00Z", "date_only": false, "value": "2026-09-16T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-20331", "record": "FKIE_CVE-2026-20331", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-09-16T16:00:00Z", "date_only": false, "value": "2026-09-16T16:00:00+00:00", "kind": "milestone", "label": "Published", "source": "csaf_cisco \u00b7 CISCO-SA-HARDENING-ASAFTDFMC-UVPPROHN", "record": "CISCO-SA-HARDENING-ASAFTDFMC-UVPPROHN", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-09-16T16:03:21Z", "date_only": false, "value": "2026-09-16T16:03:21+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-HARDENING-ASAFTDFMC-UVPPROHN", "record": "CISCO-SA-HARDENING-ASAFTDFMC-UVPPROHN", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-09-16T16:56:18.183Z", "date_only": false, "value": "2026-09-16T16:56:18.183Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-20331", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-16T17:17:17Z", "date_only": false, "value": "2026-09-16T17:17:17Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-RXHV-QF6P-6QJJ", "record": "GHSA-RXHV-QF6P-6QJJ", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-09-16T17:17:17.107Z", "date_only": false, "value": "2026-09-16T17:17:17.107", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-20331", "record": "FKIE_CVE-2026-20331", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-09-16T18:08:44.400Z", "date_only": false, "value": "2026-09-16T18:08:44.400378Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvnqbgjnfe2w", "record": "CVE-2026-20331", "field": "creation_timestamp", "uuid": "81d467e2-b270-462a-8b57-92f3b13f0f43", "content": "\ud83d\udea8 CVE-2026-20331 \u2014 CVSS 9.6 CRITICAL\n\nAs part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-20331\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mvnqbgjnfe2w"}, {"timestamp": "2026-09-16T18:30:10.498Z", "date_only": false, "value": "2026-09-16T18:30:10.498916Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvnrhn76vq2t", "record": "CVE-2026-20331", "field": "creation_timestamp", "uuid": "d64c40f4-3789-4a80-ae05-1fab2675a578", "content": "CVE-2026-20331 - cisco secure firewall adaptive security appliance (asa) software\nCisco\u2019s Adaptive Security Appliance, Threat Defense, and Management Center software could fail to enforce their own protection rules,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cisco #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mvnrhn76vq2t"}, {"timestamp": "2026-09-16T18:32:04Z", "date_only": false, "value": "2026-09-16T18:32:04Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-RXHV-QF6P-6QJJ", "record": "GHSA-RXHV-QF6P-6QJJ", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-09-16T18:32:04Z", "date_only": false, "value": "2026-09-16T18:32:04Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-RXHV-QF6P-6QJJ", "record": "GHSA-RXHV-QF6P-6QJJ", "field": "modified", "linked_record": true}, {"timestamp": "2026-09-16T22:00:00Z", "date_only": false, "value": "2026-09-16T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-3417", "record": "WID-SEC-W-2026-3417", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-09-16T22:00:00Z", "date_only": false, "value": "2026-09-16T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-3417", "record": "WID-SEC-W-2026-3417", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-09-16T22:00:00Z", "date_only": false, "value": "2026-09-16T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-3417", "record": "WID-SEC-W-2026-3417", "field": "vulnerabilities.6.release_date", "linked_record": true, "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-16T22:18:56.858Z", "date_only": false, "value": "2026-09-16T22:18:56.858199Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/vuldb/statuses/117283037933835973", "record": "CVE-2026-20331", "field": "creation_timestamp", "uuid": "01f74ce8-9013-40ac-8368-f8f8db01c6d1", "content": "We have just added an important vulnerability affecting Cisco Secure Adaptive Security Appliance Software and other products (CVE-2026-20331) https://vuldb.com/vuln/406045", "url": "https://infosec.exchange/users/vuldb/statuses/117283037933835973"}, {"timestamp": "2026-09-17T00:00:00Z", "date_only": false, "value": "2026-09-17T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1197", "record": "CERTFR-2026-AVI-1197", "field": "last_revision_date", "linked_record": true}, {"timestamp": "2026-09-17T00:00:00Z", "date_only": false, "value": "2026-09-17T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1197", "record": "CERTFR-2026-AVI-1197", "field": "initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-09-17T00:00:00Z", "date_only": false, "value": "2026-09-17T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1197", "record": "CERTFR-2026-AVI-1197", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2026-09-17T03:57:25.687Z", "date_only": false, "value": "2026-09-17T03:57:25.687Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-20331", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-17T04:17:52.400Z", "date_only": false, "value": "2026-09-17T04:17:52.400182Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/suriq.io/post/3mvoscn356l2g", "record": "CVE-2026-20331", "field": "creation_timestamp", "uuid": "6fc4c79d-bd8a-47c8-b54f-233f66ba1939", "content": "CVE-2026-20234, CVE-2026-20332 and CVE-2026-20331 are critical vulnerabilities Cisco disclosed in hardening releases for Identity Services Engine and Secure Firewall ASA, FTD and FMC. No exploitation is confirmed. Fixed software is available.", "url": "https://bsky.app/profile/suriq.io/post/3mvoscn356l2g"}, {"timestamp": "2026-09-17T04:45:31.367Z", "date_only": false, "value": "2026-09-17T04:45:31.367599Z", "kind": "sighting", "label": "Seen", "source": "https://www.hkcert.org/security-bulletin/cisco-products-multiple-vulnerabilities_20260917", "record": "CVE-2026-20331", "field": "creation_timestamp", "uuid": "f8e2b9a2-a91c-4b98-900b-6be4c9c711be", "url": "https://www.hkcert.org/security-bulletin/cisco-products-multiple-vulnerabilities_20260917"}, {"timestamp": "2026-09-18T15:50:33Z", "date_only": false, "value": "2026-09-18T15:50:33+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-HARDENING-ASAFTDFMC-UVPPROHN", "record": "CISCO-SA-HARDENING-ASAFTDFMC-UVPPROHN", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-09-18T15:50:33Z", "date_only": false, "value": "2026-09-18T15:50:33+00:00", "kind": "other", "label": "Updated", "source": "csaf_cisco \u00b7 CISCO-SA-HARDENING-ASAFTDFMC-UVPPROHN", "record": "CISCO-SA-HARDENING-ASAFTDFMC-UVPPROHN", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-09-18T15:51:25Z", "date_only": false, "value": "2026-09-18T15:51:25+00:00", "kind": "other", "label": "Document generated", "source": "csaf_cisco \u00b7 CISCO-SA-HARDENING-ASAFTDFMC-UVPPROHN", "record": "CISCO-SA-HARDENING-ASAFTDFMC-UVPPROHN", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-09-18T16:27:34.486Z", "date_only": false, "value": "2026-09-18T16:27:34.486477Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/AAKL/statuses/117292980855288138", "record": "CVE-2026-20331", "field": "creation_timestamp", "uuid": "a12a915a-da81-4aae-9538-b5def844c957", "content": "Grab a coffee. Cisco has posted several advisories, one of them addressing a critical vulnerability that was first published on the 16th. More here https://sec.cloudapps.cisco.com/security/center/publicationListing.x\nCRITICAL: CVE-2026-20329, CVE-2026-20330, and CVE-2026-20331: Cisco Secure Firewall Adaptive Security Appliance, Secure Firewall Threat Defense, and Secure Firewall Management Center Software Hardening Release: September 2026 @TalosSecurity #Cisco #vulnerability #infosec", "url": "https://infosec.exchange/users/AAKL/statuses/117292980855288138"}, {"timestamp": "2026-09-18T19:09:40.117Z", "date_only": false, "value": "2026-09-18T19:09:40.117Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-20331", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-09-18T19:09:40.117Z", "date_only": false, "value": "2026-09-18T19:09:40.117Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / cisco", "record": "CVE-2026-20331", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-18T20:17:14.087Z", "date_only": false, "value": "2026-09-18T20:17:14.087", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-20331", "record": "FKIE_CVE-2026-20331", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-09-21T22:00:00Z", "date_only": false, "value": "2026-09-21T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-3417", "record": "WID-SEC-W-2026-3417", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-09-21T22:00:00Z", "date_only": false, "value": "2026-09-21T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-3417", "record": "WID-SEC-W-2026-3417", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-09-22T08:06:34.327Z", "date_only": false, "value": "2026-09-22T08:06:34.327+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-3417", "record": "WID-SEC-W-2026-3417", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-10-28T09:28:36Z", "date_only": false, "value": "2026-10-28T09:28:36.000000Z", "kind": "sighting", "label": "Seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0458", "record": "CVE-2026-20331", "field": "creation_timestamp", "uuid": "410b37a8-74ce-4e7c-8314-b4c2ee4b61e8", "content": "Cisco heeft kwetsbaarheden verholpen in Secure Firewall ASA, Threat Defense en Management Center softwareproducten. Cisco heeft de kwetsbaarheden gegroepeerd naar acht verschillende kwetsbaarheidsklassen (CWE's) en aan iedere groep \u00e9\u00e9n CVE-kenmerk toegekend. De kwetsbaarheden betreffen verschillende beveiligingsproblemen, waaronder onvoldoende toegangscontrole, onjuiste verwerking van invoergegevens, fouten in beveiligingsmechanismen en onjuiste afhandeling van uitzonderingssituaties. Vier van de acht CVE-registraties hebben een CVSS-score van 9.0 of hoger.\n\nDe kwetsbaarheden met kenmerk CVE-2026-20329 en CVE-2026-20330 hebben beide een CVSS-score van 9.9. Voor beide kwetsbaarheidsklassen geldt dat misbruik via het netwerk mogelijk is met beperkte gebruikersrechten en zonder gebruikersinteractie. De kwetsbaarheden met kenmerk CVE-2026-20331 en CVE-2026-20332 hebben respectievelijk een CVSS-score van 9.6 en 9.0 en betreffen tekortkomingen in beveiligingsmechanismen en toegangscontrole.\n\nCisco meldt dat twee kwetsbaarheden binnen de categorie toegangscontrole actief worden misbruikt. Het betreft de eerder afzonderlijk gepubliceerde kwetsbaarheden CVE-2026-20079 en CVE-2026-20316 in Cisco Secure FMC. De kwetsbaarheden kunnen respectievelijk leiden tot het omzeilen van authenticatie en het verkrijgen van toegang met statische inloggegevens. Het NCSC heeft voor deze kwetsbaarheden reeds advisories uitgebracht. \n\nVoor de overige kwetsbaarheden uit deze hardeningrelease meldt Cisco geen bekend actief misbruik.", "url": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0458"}, {"timestamp": "2026-10-28T10:28:36.855Z", "date_only": false, "value": "2026-10-28T10:28:36.855439Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2026-0458", "record": "NCSC-2026-0458", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-10-28T10:28:36.855Z", "date_only": false, "value": "2026-10-28T10:28:36.855439Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2026-0458", "record": "NCSC-2026-0458", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-28T10:28:36.855Z", "date_only": false, "value": "2026-10-28T10:28:36.855439Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0458", "record": "NCSC-2026-0458", "field": "document.tracking.current_release_date", "linked_record": true}], "metrics": {"as_of": "2026-11-07T10:26:52.470Z", "anchors": {"origin": {"timestamp": "2026-09-16T16:00:00Z", "date_only": false, "value": "2026-09-16T16:00:00+00:00", "kind": "milestone", "label": "Published", "source": "csaf_cisco \u00b7 CISCO-SA-HARDENING-ASAFTDFMC-UVPPROHN", "record": "CISCO-SA-HARDENING-ASAFTDFMC-UVPPROHN", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-09-16T16:00:00Z", "date_only": false, "value": "2026-09-16T16:00:00+00:00", "kind": "milestone", "label": "Published", "source": "csaf_cisco \u00b7 CISCO-SA-HARDENING-ASAFTDFMC-UVPPROHN", "record": "CISCO-SA-HARDENING-ASAFTDFMC-UVPPROHN", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 4472812.470695, "hours": 1242.447908526389, "days": 51.76866285526621, "min_seconds": 4472812.470695, "max_seconds": 4472812.470695, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-09-16T16:00:00Z", "date_only": false, "value": "2026-09-16T16:00:00+00:00", "kind": "milestone", "label": "Published", "source": "csaf_cisco \u00b7 CISCO-SA-HARDENING-ASAFTDFMC-UVPPROHN", "record": "CISCO-SA-HARDENING-ASAFTDFMC-UVPPROHN", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-11-07T10:26:52.470Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}