References https://www.cisco.com/c/en/us/support/docs/csa/cisco-sa-asa-buffer-overflow-PyRUhWBC.html https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-buffer-overflow-PyRUhWBC https://nvd.nist.gov/view/vuln/detail?vulnId=CVE-2025-20263 https://cve.imfht.com/detail/CVE-2025-20263 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-webvpn-z5xP8EUB https://nvd.nist.gov/vuln/detail/cve-2025-20333 https://cve.imfht.com/detail/CVE-2025-20333 https://zeropath.com/blog/cve-2025-20263-cisco-asa-ftd-buffer-overflow-summary https://zeropath.com/blog/cve-2025-20333-cisco-asa-ftd-vpn-web-server-buffer-overflow-summary https://www.rapid7.com/blog/post/etr-cve-2025-20333-cve-2025-20362-cve-2025-20363-multiple-critical-vulnerabilities-affecting-cisco-products/
Related VulnerabilitiesPoCCVE-2026-0561: Shield Security <= 21.0.8 - Unauthenticated Reflected XSSPoCCVE-2026-5032: W3 Total Cache <= 2.9.3 - Unauthenticated Dynamic Security Token DisclosurePoCCVE-2015-7501: Red Hat JBoss - Insecure DeserializationPoCCVE-2019-1003030: Jenkins Pipeline Groovy Plugin <=2.63 - Insecure DeserializationCisco ISE /admin/files-upload/ 文件上传漏洞(CVE-2025-20282)英華達|全家寶 Cloud - Insecure Direct Object ReferencePoCCVE-2025-20282: Cisco ISE < 3.4P2 - Unauthenticated Arbitrary File UploadPoCCVE-2026-46725: TYPO3 ceselector Extension - Insecure Deserialization沛盛資訊|OMICARD EDM - Insecure Direct Object Reference金財通商務科技|Service Center - Insecure Direct Object ReferenceSecurePoint UTM /spcgi.cgi 信息泄露漏洞(CVE-2023-22620)Tattile Camera /api/v1/security/login 默认口令漏洞(CVE-2026-26341)PoCCVE-2023-49438: Python Flask-Security-Too <=5.3.2 - Open Redirect