CISA's list that day
25 September 2025
On CISA added 2 vulnerabilities to its list of exploited vulnerabilities, in Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense. US federal agencies must fix them by .
Added that day
| Vulnerability | Product | Our group | Listed | Deadline | EPSS |
|---|---|---|---|---|---|
| CVE-2025-20333Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense | Patch this weekEPSS 0.71 | 0.71 | ||
| CVE-2025-20362Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense | Patch this weekEPSS 0.87 | 0.87 |