Cisco Cisco Secure Firewall Threat Defense (FTD) Software
80 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-76489 | 7.0.0 ; 7.0.0.1 ; 7.0.1 ; … | Multiple Cisco Products Snort 3 Generic File Processing Memory Exhaustion Denial of Service Vulnerability | MEDIUM 5.8 | 0.5 % | ||
| CVE-2026-76445 | 7.0.0 ; 7.0.0.1 ; 7.0.1 ; … | Multiple Cisco Products Snort 3 Denial of Service Vulnerability | MEDIUM 5.3 | 0.5 % | ||
| CVE-2026-20356 | 7.0.0 ; 7.0.0.1 ; 7.0.1 ; … | Multiple Cisco Products Snort 3 Software Hardening Release: October 2026 | HIGH 7.5 | 0.4 % | ||
| CVE-2026-20236 | 7.0.0 ; 7.0.0.1 ; 7.0.1 ; … | Multiple Cisco Products Snort 3 Software Hardening Release: October 2026 | HIGH 7.5 | 0.4 % | ||
| CVE-2026-20291 | 7.0.0 ; 7.0.0.1 ; 7.0.1 ; … | Multiple Cisco Products Snort 3 Software Hardening Release: October 2026 | HIGH 7.8 | 0.2 % | ||
| CVE-2026-20221 | 7.0.0 ; 7.0.0.1 ; 7.0.1 ; … | Multiple Cisco Products Snort 3 Generic Routing Encapsulation Denial of Service Vulnerabilities | MEDIUM 5.8 | 0.6 % | ||
| CVE-2026-20197 | 7.0.0 ; 7.0.0.1 ; 7.0.1 ; … | Multiple Cisco Products Snort 3 Teredo Protocol Denial of Service Vulnerability | MEDIUM 5.8 | 0.5 % | ||
| CVE-2026-20218 | 7.2.0 ; 7.2.0.1 ; 7.2.1 ; … | Cisco Secure Firewall Threat Defense Snort 3 Visual Basic for Applications Buffer Overflow Denial of Service Vulnerability | MEDIUM 5.8 | 0.6 % | ||
| CVE-2026-20179 | 7.0.0 ; 7.0.0.1 ; 7.0.1 ; … | Multiple Cisco Products Snort 3 Generic Routing Encapsulation Denial of Service Vulnerabilities | MEDIUM 5.8 | 0.5 % | ||
| CVE-2026-20043 | 7.0.0 ; 7.0.0.1 ; 7.0.1 ; … | Multiple Cisco Products Snort 3 Software Hardening Release: October 2026 | CRITICAL 9.0 | 0.4 % | ||
| CVE-2026-20019 | 7.0.0 ; 7.0.0.1 ; 7.0.1 ; … | Multiple Cisco Products Snort 3 Netflow Denial of Service Vulnerabilities | MEDIUM 5.8 | 0.5 % | ||
| CVE-2026-20011 | 7.0.0 ; 7.0.0.1 ; 7.0.1 ; … | Multiple Cisco Products Snort 3 SMTP MIME Denial of Service Vulnerability | MEDIUM 5.8 | 0.5 % | ||
| CVE-2026-20121 | 7.6.0 ; 7.7.0 ; 7.6.1 ; … | CIsco FTD Bypass Access List | MEDIUM 5.3 | 0.5 % | ||
| CVE-2026-20120 | 7.6.0 ; 7.7.0 ; 7.6.1 ; … | Cisco FTD ACL bypass vulnerability | MEDIUM 5.8 | 0.5 % | ||
| CVE-2026-20290 | 7.0.0 ; 7.0.0.1 ; 7.0.1 ; … | Cisco Secure Firewall Threat Defense Software Snort 2 SSL/TLS Denial of Service Vulnerability | MEDIUM 5.8 | 0.3 % | ||
| CVE-2026-20248 | 7.0.0 ; 7.0.0.1 ; 7.0.1 ; … | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software TCP DNS Denial of Service Vulnerability | MEDIUM 6.8 | 0.5 % | ||
| CVE-2026-20323 | 7.0.0 ; 7.0.0.1 ; 7.0.1 ; … | Cisco Secure Firewall Management Center and Secure Firewall Threat Defense Software sftunnel Unauthorized Authentication Bypass Vulnerabi… | HIGH 8.3 | 0.1 % | ||
| CVE-2026-20333 | 7.0.0.1 ; 7.0.1 ; 7.0.1.1 ; … | Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software… | HIGH 8.8 | 0.5 % | ||
| CVE-2026-20334 | 7.0.0.1 ; 7.0.1 ; 7.0.1.1 ; … | Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software… | HIGH 8.4 | 0.4 % | ||
| CVE-2026-20332 | 7.0.0.1 ; 7.0.1 ; 7.0.1.1 ; … | Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software… | CRITICAL 9.9 | 0.4 % | ||
| CVE-2026-20154 | 7.0.0 ; 7.0.0.1 ; 7.0.1 ; … | Cisco Secure Firewall Adaptive Security Appliance Software and Secure Firewall Threat Defense Software Logging Denial of Service | HIGH 8.6 | 0.6 % | ||
| CVE-2026-20222 | 7.3.0 ; 7.3.1 ; 7.3.1.1 ; … | Cisco Secure Adaptive Security Appliance Software and Secure Firewall Threat Defense Software EIGRP Denial of Service Vulnerability | HIGH 7.4 | 0.3 % | ||
| CVE-2026-20135 | 7.0.0 ; 7.0.0.1 ; 7.0.1 ; … | Cisco Secure Firewall Threat Defense Software TLS 1.3 Denial of Service Vulnerability | HIGH 8.6 | 0.7 % | ||
| CVE-2026-20336 | 7.0.0.1 ; 7.0.1 ; 7.0.1.1 ; … | Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software… | HIGH 8.8 | 0.3 % | ||
| CVE-2026-20249 | 7.0.0 ; 7.0.0.1 ; 7.0.1 ; … | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software IKEv2 Certificate Authentication Denial of … | HIGH 8.6 | 0.4 % | ||
| CVE-2026-20335 | 7.0.0.1 ; 7.0.1 ; 7.0.1.1 ; … | Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software… | HIGH 8.1 | 0.4 % | ||
| CVE-2026-20295 | 7.0.0 ; 7.0.0.1 ; 7.0.1 ; … | Cisco Secure Firewall Management Center and Secure Firewall Threat Defense Software sftunnel Memory Exhaustion Denial of Service Vulnerab… | HIGH 8.6 | 0.6 % | ||
| CVE-2026-20250 | 7.6.0 ; 7.7.0 ; 7.6.1 ; … | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software for Firepower 3100 and 4200 Series DTLS Den… | HIGH 8.6 | 0.6 % | ||
| CVE-2026-20330 | 7.0.0.1 ; 7.0.1 ; 7.0.1.1 ; … | Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software… | CRITICAL 9.9 | 0.5 % | ||
| CVE-2026-20329 | 7.0.0.1 ; 7.0.1 ; 7.0.1.1 ; … | Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software… | CRITICAL 9.9 | 0.5 % | ||
| CVE-2026-20331 | 7.0.0.1 ; 7.0.1 ; 7.0.1.1 ; … | Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software… | CRITICAL 9.6 | 0.3 % | ||
| CVE-2026-20349 | 7.0.0 ; 7.0.0.1 ; 7.0.1 ; … | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service Vul… | HIGH 8.6 | 1.0 % | KEV | |
| CVE-2026-20012 | 6.2.3 ; 6.2.3.1 ; 6.2.3.2 ; … | A vulnerability in the Internet Key Exchange version 2 (IKEv2) feature of Cisco IOS Software, Cisco IOS XE Software, Cisco Secure Firewall A | HIGH 8.6 | 0.4 % | ||
| CVE-2026-20064 | 6.4.0 ; 6.4.0.1 ; 6.4.0.3 ; … | A vulnerability in of Cisco Secure Firewall Threat Defense (FTD) Software could allow an authenticated, local attacker to cause the device t | MEDIUM 6.5 | 0.1 % | ||
| CVE-2026-20025 | 6.4.0 ; 6.4.0.1 ; 6.4.0.3 ; … | A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an authenticated, adjac | MEDIUM 6.8 | 0.2 % | ||
| CVE-2026-20024 | 6.4.0 ; 6.4.0.1 ; 6.4.0.3 ; … | A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an authenticated, adjac | MEDIUM 6.8 | 0.2 % | ||
| CVE-2026-20023 | 6.4.0 ; 6.4.0.1 ; 6.4.0.3 ; … | A vulnerability in the OSPF protocol of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat De | MEDIUM 6.5 | 0.2 % | ||
| CVE-2026-20022 | 6.4.0 ; 6.4.0.1 ; 6.4.0.3 ; … | A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, adj | MEDIUM 6.5 | 0.2 % | ||
| CVE-2026-20021 | 6.4.0 ; 6.4.0.1 ; 6.4.0.3 ; … | A vulnerability in the OSPF protocol of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat De | MEDIUM 4.3 | 0.2 % | ||
| CVE-2026-20020 | 6.4.0 ; 6.4.0.1 ; 6.4.0.3 ; … | A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, adj | MEDIUM 6.8 | 0.3 % | ||
| CVE-2026-20016 | 7.0.0 ; 7.0.0.1 ; 7.0.1 ; … | A vulnerability in the Cisco FXOS Software CLI feature for Cisco Secure Firewall ASA Software and Secure FTD Software could allow an authent | MEDIUM 6.7 | 0.3 % | ||
| CVE-2026-20073 | 6.4.0.1 ; 6.4.0.2 ; 6.4.0.5 ; … | Cisco Secure Firewall Adaptive Security Appliance Software and Cisco Secure Firewall Threat Defense Software Access Control List Bypass V… | MEDIUM 5.8 | 0.4 % | ||
| CVE-2026-20102 | 7.0.0 ; 7.0.0.1 ; 7.0.1 ; … | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software SAML Reflected Cross-Site Scripting Vulnera… | MEDIUM 6.1 | 0.3 % | ||
| CVE-2026-20070 | 6.4.0.1 ; 6.4.0.2 ; 6.4.0.5 ; … | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software VPN Web Services Cross-Site Scripting Vulne… | MEDIUM 6.1 | 0.3 % | ||
| CVE-2026-20069 | 6.4.0.1 ; 6.4.0.2 ; 6.4.0.5 ; … | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software VPN Web Services Client-Side Request Smuggl… | MEDIUM 4.3 | 0.3 % | ||
| CVE-2026-20068 | 7.2.4 ; 7.2.5 ; 7.2.4.1 ; … | Multiple Cisco Products Snort 3 TBD Denial of Service Vulnerability | MEDIUM 5.8 | 0.4 % | ||
| CVE-2026-20067 | 7.0.0 ; 7.0.0.1 ; 7.0.1 ; … | Multiple Cisco Products Snort 3 TBD Denial of Service Vulnerability | MEDIUM 5.8 | 0.5 % | ||
| CVE-2026-20066 | 7.4.0 ; 7.4.1 ; 7.4.1.1 ; … | Multiple Cisco Products Snort 3 TBD Denial of Service Vulnerability | MEDIUM 5.8 | 0.5 % | ||
| CVE-2026-20065 | 7.0.0 ; 7.0.0.1 ; 7.0.1 ; … | Multiple Cisco Products Snort 3 TBD Denial of Service Vulnerability | MEDIUM 5.8 | 0.4 % | ||
| CVE-2026-20063 | 7.6.0 ; 7.7.0 ; 7.6.1 ; … | Cisco Secure FTD Software Authenticated Command Injection Vulnerability | MEDIUM 6.0 | 0.2 % | ||
| CVE-2026-20058 | 7.2.0 ; 7.2.0.1 ; 7.2.1 ; … | Cisco Secure Firewall Threat Defense Software Snort 3 Visual Basic for Application Denial of Service Vulnerability | MEDIUM 5.8 | 0.4 % | ||
| CVE-2026-20057 | 7.2.0 ; 7.2.0.1 ; 7.2.1 ; … | Cisco Secure Firewall Threat Defense Software Snort 3 Visual Basic for Application Denial of Service Vulnerability | MEDIUM 5.8 | 0.5 % | ||
| CVE-2026-20054 | 7.2.0 ; 7.2.0.1 ; 7.2.1 ; … | Cisco Secure Firewall Threat Defense Software Snort 3 Visual Basic for Application Infinite Loop Denial of Service Vulnerability | MEDIUM 5.8 | 0.5 % | ||
| CVE-2026-20053 | 7.2.0 ; 7.2.0.1 ; 7.2.1 ; … | Cisco Secure Firewall Threat Defense Software Snort 3 Visual Basic for Application Heap Overflow Denial of Service Vulnerability | MEDIUM 5.8 | 0.4 % | ||
| CVE-2026-20052 | 7.4.0 ; 7.4.1 ; 7.4.1.1 ; … | Cisco Secure Firewall Threat Defense Software Snort 3 Memory Management Denial of Service Vulnerability | MEDIUM 5.8 | 0.4 % | ||
| CVE-2026-20050 | 7.0.0 ; 7.0.0.1 ; 7.0.1 ; … | Cisco Secure Firewall Threat Defense Decryption Policy Denial of Service Vulnerability | MEDIUM 6.8 | 0.4 % | ||
| CVE-2026-20017 | 6.4.0.1 ; 6.4.0.2 ; 6.4.0.5 ; … | Cisco Secure FTD Software Authenticated Command Injection Vulnerability | MEDIUM 6.0 | 0.2 % | ||
| CVE-2026-20018 | 7.0.0 ; 7.0.0.1 ; 7.0.1 ; … | Cisco Firepower Management Center Software and Firepower Threat Defense Path Traversal Vulnerability | MEDIUM 5.9 | 0.4 % | ||
| CVE-2026-20007 | 6.4.0.1 ; 6.4.0.2 ; 6.4.0.5 ; … | Cisco Secure Firewall Threat Defense Software Snort Deep Inspection Bypass Vulnerability | MEDIUM 5.8 | 0.2 % | ||
| CVE-2026-20006 | 7.2.0 ; 7.2.0.1 ; 7.2.1 ; … | Cisco Firepower Threat Defense Software and Cisco FirePOWER Services TLS with Snort 3 Denial of Service Vulnerability | MEDIUM 5.8 | 0.4 % | ||
| CVE-2026-20049 | 6.4.0.10 ; 6.4.0.11 ; 6.4.0.12 ; … | A vulnerability in the processing of Galois/Counter Mode (GCM)-encrypted Internet Key Exchange version 2 (IKEv2) IPsec traffic of Cisco Secu | HIGH 7.7 | 0.3 % | ||
| CVE-2026-20015 | 7.2.0 ; 7.2.0.1 ; 7.2.1 ; … | A vulnerability in the IKEv2 feature of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, rem | MEDIUM 5.8 | 0.3 % | ||
| CVE-2026-20014 | 7.2.0 ; 7.2.0.1 ; 7.2.1 ; … | A vulnerability in the IKEv2 feature of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an authenticated, remot | HIGH 7.7 | 0.3 % | ||
| CVE-2026-20013 | 6.4.0 ; 6.4.0.1 ; 6.4.0.3 ; … | A vulnerability in the IKEv2 feature of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, rem | MEDIUM 5.8 | 0.3 % | ||
| CVE-2026-20106 | 6.4.0 ; 6.4.0.1 ; 6.4.0.3 ; … | A vulnerability in the Remote Access SSL VPN, HTTP management and MUS functionality, of Cisco Secure Firewall Adaptive Security Appliance (A | MEDIUM 5.3 | 0.3 % | ||
| CVE-2026-20105 | 6.4.0 ; 6.4.0.1 ; 6.4.0.3 ; … | A vulnerability in the Remote Access SSL VPN functionality of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Fi | HIGH 7.7 | 0.3 % | ||
| CVE-2026-20103 | 6.4.0.16 ; 6.4.0.17 ; 6.4.0.18 ; … | A vulnerability in the Remote Access SSL VPN functionality of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Fi | HIGH 8.6 | 0.4 % | ||
| CVE-2026-20101 | 6.4.0 ; 6.4.0.1 ; 6.4.0.3 ; … | A vulnerability in the SAML 2.0 single sign-on (SSO) feature of Cisco Secure Firewall ASA Software and Secure FTD Software could allow an un | HIGH 8.6 | 0.4 % | ||
| CVE-2026-20100 | 6.4.0 ; 6.4.0.1 ; 6.4.0.3 ; … | A vulnerability in the LUA interperter of the Remote Access SSL VPN feature of Cisco Secure Firewall Adaptive Security Appliance (ASA) Softw | HIGH 7.7 | 0.3 % | ||
| CVE-2026-20039 | 6.4.0.1 ; 6.4.0.2 ; 6.4.0.5 ; … | Cisco Adaptive Security Appliance and Firepower Threat Defense Software SSL VPN Authentication Denial of Service Vulnerability | HIGH 8.6 | 0.4 % | ||
| CVE-2026-20008 | 6.4.0.1 ; 6.4.0.2 ; 6.4.0.5 ; … | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Lua Code Injection Vulnerability | MEDIUM 6.0 | 0.1 % | ||
| CVE-2026-20005 | 7.6.0 ; 7.6.1 ; 7.6.2 ; … | Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker | MEDIUM 5.8 | 0.5 % | ||
| CVE-2026-20027 | 7.0.0 ; 7.0.0.1 ; 7.0.1 ; … | Cisco Snort DCERPC Stub Data Out of Bounds Read | MEDIUM 5.3 | 0.6 % | ||
| CVE-2026-20026 | 7.0.0 ; 7.0.0.1 ; 7.0.1 ; … | Multiple Cisco Products Snort 3 DCERPC Vulnerabilities | MEDIUM 5.8 | 0.7 % | ||
| CVE-2025-20360 | 7.3.0 ; 7.3.1 ; 7.3.1.1 ; … | Multiple Cisco Products Snort 3 MIME Denial of Service Vulnerability | MEDIUM 5.8 | 0.4 % | ||
| CVE-2025-20359 | 7.4.1 ; 7.4.1.1 ; 7.6.0 ; … | Multiple Cisco Products Snort 3 MIME Information Disclosure or Denial of Service Vulnerability | CRITICAL 9.1 | 0.5 % | ||
| CVE-2025-20362 | 6.2.3 ; 6.2.3.1 ; 6.2.3.2 ; … | Update: On November 5, 2025, Cisco became aware of a new attack variant against devices running Cisco Secure ASA Software or Cisco Secure FT | HIGH 8.6 | 87 % | KEV | |
| CVE-2025-20333 | 6.2.3 ; 6.2.3.1 ; 6.2.3.2 ; … | A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat D | CRITICAL 9.9 | 71 % | KEV | |
| CVE-2024-20260 | 7.0.0 ; 7.0.0.1 ; 7.0.1 ; … | Cisco Adaptive Security Virtual Appliance and Secure Firewall Threat Defense Virtual SSL VPN Denial of Service Vulnerability | HIGH 8.6 | 0.6 % | ||
| CVE-2024-20358 | 6.2.3 ; 6.2.3.1 ; 6.2.3.2 ; … | A vulnerability in the Cisco Adaptive Security Appliance (ASA) restore functionality that is available in Cisco ASA Software and Cisco Firep | MEDIUM 6.7 | 0.7 % |