CISA added Cisco ASA and FTD CVE-2026-20349 to KEV after Cisco confirmed active attacks. Patch affected Remote Access SSL VPN software and validate firewall availability.