Cisco has warned that CVE-2026-20349, a high-severity VPN vulnerability in ASA and FTD firewalls, is being actively exploited to remotely crash affected devices. The flaw can be exploited without authentication, and Cisco recommends immediately upgrading to fixed software, as no workaround is available.