---
title: Critical Zero-Day Hits 48,000+ Cisco Firewalls as Hackers Strike
description: Actively exploited zero-day flaw in Cisco firewalls exposes systems worldwide, urging immediate patching to prevent unauthorized access.
canonical_url: https://codekeeper.co/ticker/cisco-firewalls-zero-day-vulnerability
---

# Critical Zero-Day Hits 48,000+ Cisco Firewalls as Hackers Strike

Actively exploited zero-day flaw in Cisco firewalls exposes systems worldwide, urging immediate patching to prevent unauthorized access.

![Content Team](https://codekeeper.co/hubfs/_sized/Codekeeper_21_beeldmerkL-800.png)

By Content Team Oct 1, 2025

Share [![Share on facebook](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Facebook.svg)](http://www.facebook.com/share.php?u=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fcisco-firewalls-zero-day-vulnerability%3Futm_medium%3Dsocial%26utm_source%3Dfacebook) [![Share on linkedin](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Linkedin.svg)](http://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fcisco-firewalls-zero-day-vulnerability%3Futm_medium%3Dsocial%26utm_source%3Dlinkedin) [![Share on twitter](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20X.svg)](https://twitter.com/intent/tweet?original_referer=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fcisco-firewalls-zero-day-vulnerability%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&url=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fcisco-firewalls-zero-day-vulnerability%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&source=tweetbutton&text=) [![Share on email](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Mail.svg)](mailto:?subject=Check%20out%20https%3A%2F%2Fcodekeeper.co%2Fticker%2Fcisco-firewalls-zero-day-vulnerability%3Futm_medium%3Dsocial%26utm_source%3Demail%20&body=Check%20out%20https%3A%2F%2Fcodekeeper.co%2Fticker%2Fcisco-firewalls-zero-day-vulnerability%3Futm_medium%3Dsocial%26utm_source%3Demail) ![Copy link](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Copy.svg)

ON THIS PAGE

### Want more insights like this?

Subscribe to our newsletter to get the latest software protection strategies delivered to your inbox.

By submitting your email, you consent to Codekeeper contacting you and agree to our [privacy policy](https://codekeeper.co/privacy-policy) .

A devastating zero-day vulnerability (CVE-2025-20333) is being actively exploited across thousands of Cisco firewalls worldwide. With a CVSS score of 9.9, this buffer overflow flaw lets authenticated attackers execute code with root privileges on Cisco ASA and FTD devices. Over 48,800 unpatched systems were identified on September 29, with the US most affected. The vulnerability targets VPN web servers that millions of organizations use for remote access. Attackers need valid VPN credentials, then send malicious HTTP requests to gain complete firewall control. Cisco confirms no workarounds exist and urges immediate patching. A second bug (CVE-2025-20362) allows unauthorized VPN access, making the situation worse. **Source:** [Cyber Security News](https://cybersecuritynews.com/cisco-firewalls-vulnerability-exploited/)

Share this article [![Share on facebook](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Facebook.svg)](http://www.facebook.com/share.php?u=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fcisco-firewalls-zero-day-vulnerability%3Futm_medium%3Dsocial%26utm_source%3Dfacebook) [![Share on linkedin](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Linkedin.svg)](http://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fcisco-firewalls-zero-day-vulnerability%3Futm_medium%3Dsocial%26utm_source%3Dlinkedin) [![Share on twitter](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20X.svg)](https://twitter.com/intent/tweet?original_referer=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fcisco-firewalls-zero-day-vulnerability%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&url=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fcisco-firewalls-zero-day-vulnerability%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&source=tweetbutton&text=) [![Share on email](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Mail.svg)](mailto:?subject=Check%20out%20https%3A%2F%2Fcodekeeper.co%2Fticker%2Fcisco-firewalls-zero-day-vulnerability%3Futm_medium%3Dsocial%26utm_source%3Demail%20&body=Check%20out%20https%3A%2F%2Fcodekeeper.co%2Fticker%2Fcisco-firewalls-zero-day-vulnerability%3Futm_medium%3Dsocial%26utm_source%3Demail) ![Copy link](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Copy.svg)

![blog_book_a_demo_cta_3x](https://codekeeper.co/hubfs/_sized/Codekeeper%202025/blog_book_a_demo_cta_3x-768x512.webp)

Have questions about protecting your software?

Our escrow experts are standing by to help.

[Book a free demo](https://codekeeper.co/book-a-demo)

YOU MAY ALSO LIKE

[Cyberattacks Cl0p Ransomware Names 40+ Victims in PTC Windchill Attack Campaign Aug 20, 2026](https://codekeeper.co/ticker/cl0p-ransomware-breach-ptc-vulnerability)

[Aflac Japan Data Breach Hits 4.4 Million Customers Aug 12, 2026](https://codekeeper.co/ticker/aflac-japan-data-breach-2023)

[CISA Warns of Actively Exploited SolarWinds Serv-U Vulnerability Aug 12, 2026](https://codekeeper.co/ticker/critical-serv-u-flaw-cve-2026-28318)

['RufRoot' Flaw Exposes AI Agent Platforms to Memory Poisoning — Even After Patching Aug 11, 2026](https://codekeeper.co/ticker/critical-ruflo-ai-vulnerability-patch)