Overview
Cisco has released a security advisory to address a high severity vulnerability in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software.
- CVE-2026-20349 - ‘Improper Disposal of Heap-Allocated Memory Before Release’ vulnerability - CVSSv3.1 Score: 8.6. There is evidence of exploitation of this vulnerability in the wild.
Affected Versions: Secure Firewall ASA – version 9.24 and prior versions.
Secure FTD – version 10 and prior versions.
Citrix published a security advisory for a vulnerability affecting NetScaler ADC (formerly Citrix ADC) and NetScaler Gateway (formerly Citrix Gateway). Successful exploitation of CVE-2026-8452 could lead to denial-of-service (DoS) or remote code execution (RCE) when the appliance is configured as a Gateway or an AAA virtual server.
- CVE-2026-8452 - 'Memory overflow' vulnerability – CVSSv4 score: 8.8
Note: While Citrix has described the impact as a denial-of-service condition, security researchers have published a proof of concept that demonstrates the vulnerability could lead to remote code execution (RCE).
Affected Versions: NetScaler ADC Versions
- 14.1 prior to 14.1-72.61
- 13.1 prior to 13.1-63.18
- FIPS prior to 14.1-72.61 FIPS
- FIPS and NDcPP prior to 13.1-37.272
NetScaler Gateway Versions:
- 14.1 prior to 14.1-72.61
- 13.1 prior to 13.1-63.18
Microsoft has released security updates to address 421 vulnerabilities in Microsoft products, including the 3 zero-day vulnerabilities highlighted below.
- CVE-2026-68820 - Windows Ancillary Function Driver for WinSock elevation of privilege vulnerability with a CVSSv3 base score of 7.0, arising from a 'Use After Free' weakness. This vulnerability has been reported as actively exploited.
- CVE-2026-62832 - Windows User Profile Service elevation of privilege vulnerability with a CVSSv3 base score of 7.8, arising from an 'improper link resolution before file access (link following)' weakness.
- CVE-2026-72971 - Windows Container Isolation FS Filter Driver (unionfs.sys) Tampering Vulnerability with a CVSSv3 base score of 5.5, arising from an 'improper link resolution before file access (link following)' weakness.
SharePoint Server 2016 and 2019 are no longer supported
As of 14 July 2026, Microsoft ended their extended support for SharePoint Server 2016 and SharePoint Server 2019. These products are now unsupported by Microsoft.
Recommended Action
Organisations are encouraged to review the appropriate security advisory pages and apply the updates:
Cisco – Cisco Security Advisory
Citrex – Support - Articles
Microsoft – August 2026 Security Updates