CVE-2026-20062

CVE-2026-20062 is a high-severity vulnerability in the CLI of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software when operating in multiple context mode. This flaw, due to improper access controls for SCP operations, allows an authenticated local attacker with administrative privileges in one context to read, create, or overwrite sensitive files in other contexts, including the admin and system contexts. The CVSS score is 7.2 (HIGH), indicating a local attack vector with high privileges required and high impact on confidentiality and integrity, though availability is not directly affected. While the attacker needs to know exact file paths, increasing complexity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or inclusion in CISA's KEV catalog. However, the vulnerability has garnered some community discussion and media coverage.