CS
Product
Cisco Secure Firewall Threat Defense (FTD) Software
On CISA KEVExploited in the wild
74
CVEs
3
On KEV
9.9
Max CVSS
12
New 30D
Severity mix
Critical 6High 24Medium 44Low 0
Watch
Add Cisco Secure Firewall Threat Defense (FTD) Software to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-20248 | 6.8 | Sep 16 | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software TCP DNS Denial of Service Vulnerability Affected: 7.0.0; 7.0.0.1; 7.0.1; 7.0.1.1; 7.0.2; 7.2.0; +34 more |
| CVE-2026-20025 | 6.8 | Mar 4 | A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an authenticated, adjacent attacker to cause an affected… Affected: 6.4.0; 6.4.0.1; 6.4.0.3; 6.4.0.2; 6.4.0.4; 6.4.0.5; +34 more |
| CVE-2026-20050 | 6.8 | Mar 4 | Cisco Secure Firewall Threat Defense Decryption Policy Denial of Service Vulnerability Affected: 7.0.0; 7.0.0.1; 7.0.1; 7.1.0; 7.0.1.1; 7.1.0.1; +34 more |
| CVE-2026-20016 | 6.7 | Mar 4 | A vulnerability in the Cisco FXOS Software CLI feature for Cisco Secure Firewall ASA Software and Secure FTD Software could allow an authenticated, local attacker to execute… Affected: 7.0.0; 7.0.0.1; 7.0.1; 7.0.1.1; 7.0.2; 7.0.2.1; +34 more |
| CVE-2026-20064 | 6.5 | Mar 4 | A vulnerability in of Cisco Secure Firewall Threat Defense (FTD) Software could allow an authenticated, local attacker to cause the device to unexpectedly reload, causing a denial… Affected: 6.4.0; 6.4.0.1; 6.4.0.3; 6.4.0.2; 6.4.0.4; 6.4.0.5; +34 more |
| CVE-2026-20023 | 6.5 | Mar 4 | A vulnerability in the OSPF protocol of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an… Affected: 6.4.0; 6.4.0.1; 6.4.0.3; 6.4.0.2; 6.4.0.4; 6.4.0.5; +34 more |
| CVE-2026-20022 | 6.5 | Mar 4 | A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, adjacent attacker to cause an affected… Affected: 6.4.0; 6.4.0.1; 6.4.0.3; 6.4.0.2; 6.4.0.4; 6.4.0.5; +34 more |
| CVE-2026-20102 | 6.1 | Mar 4 | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software SAML Reflected Cross-Site Scripting Vulnerability Affected: 7.0.0; 7.0.0.1; 7.0.1; 7.1.0; 7.0.1.1; 7.1.0.1; +2 more |
| CVE-2026-20070 | 6.1 | Mar 4 | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software VPN Web Services Cross-Site Scripting Vulnerability Affected: 6.4.0.1; 6.4.0.2; 6.4.0.5; 6.4.0; 6.4.0.3; 6.4.0.4; +34 more |
| CVE-2026-20063 | 6.0 | Mar 4 | Cisco Secure FTD Software Authenticated Command Injection Vulnerability Affected: 7.6.0; 7.7.0; 7.6.1; 7.6.2; 7.7.10; 7.6.2.1; +1 more |
| CVE-2026-20017 | 6.0 | Mar 4 | Cisco Secure FTD Software Authenticated Command Injection Vulnerability Affected: 6.4.0.1; 6.4.0.2; 6.4.0.5; 6.4.0; 6.4.0.3; 6.4.0.4; +34 more |
| CVE-2026-20008 | 6.0 | Mar 4 | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Lua Code Injection Vulnerability Affected: 6.4.0.1; 6.4.0.2; 6.4.0.5; 6.4.0; 6.4.0.3; 6.4.0.4; +34 more |
| CVE-2026-20018 | 5.9 | Mar 4 | Cisco Firepower Management Center Software and Firepower Threat Defense Path Traversal Vulnerability Affected: 7.0.0; 7.0.0.1; 7.0.1; 7.1.0; 7.0.1.1; 7.1.0.1; +34 more |
| CVE-2026-76489 New | 5.8 | Oct 21 | Multiple Cisco Products Snort 3 Generic File Processing Memory Exhaustion Denial of Service Vulnerability Affected: 7.0.0; 7.0.0.1; 7.0.1; 7.0.1.1; 7.0.2; 7.2.0; +34 more |
| CVE-2026-20221 New | 5.8 | Oct 21 | Multiple Cisco Products Snort 3 Generic Routing Encapsulation Denial of Service Vulnerabilities Affected: 7.0.0; 7.0.0.1; 7.0.1; 7.0.1.1; 7.0.2; 7.2.0; +34 more |
| CVE-2026-20197 New | 5.8 | Oct 21 | Multiple Cisco Products Snort 3 Teredo Protocol Denial of Service Vulnerability Affected: 7.0.0; 7.0.0.1; 7.0.1; 7.0.1.1; 7.0.2; 7.2.0; +34 more |
| CVE-2026-20218 New | 5.8 | Oct 21 | Cisco Secure Firewall Threat Defense Snort 3 Visual Basic for Applications Buffer Overflow Denial of Service Vulnerability Affected: 7.2.0; 7.2.0.1; 7.2.1; 7.3.0; 7.2.2; 7.2.3; +34 more |
| CVE-2026-20179 New | 5.8 | Oct 21 | Multiple Cisco Products Snort 3 Generic Routing Encapsulation Denial of Service Vulnerabilities Affected: 7.0.0; 7.0.0.1; 7.0.1; 7.0.1.1; 7.0.2; 7.2.0; +34 more |
| CVE-2026-20019 New | 5.8 | Oct 21 | Multiple Cisco Products Snort 3 Netflow Denial of Service Vulnerabilities Affected: 7.0.0; 7.0.0.1; 7.0.1; 7.0.1.1; 7.0.2; 7.2.0; +34 more |
| CVE-2026-20011 New | 5.8 | Oct 21 | Multiple Cisco Products Snort 3 SMTP MIME Denial of Service Vulnerability Affected: 7.0.0; 7.0.0.1; 7.0.1; 7.0.1.1; 7.0.2; 7.2.0; +34 more |
| CVE-2026-20120 | 5.8 | Sep 16 | Cisco FTD ACL bypass vulnerability Affected: 7.6.0; 7.7.0; 7.6.1; 7.6.2; 7.7.10; 7.7.11; +2 more |
| CVE-2026-20290 | 5.8 | Sep 16 | Cisco Secure Firewall Threat Defense Software Snort 2 SSL/TLS Denial of Service Vulnerability Affected: 7.0.0; 7.0.0.1; 7.0.1; 7.0.1.1; 7.0.2; 7.2.0; +34 more |
| CVE-2026-20073 | 5.8 | Mar 4 | Cisco Secure Firewall Adaptive Security Appliance Software and Cisco Secure Firewall Threat Defense Software Access Control List Bypass Vulnerability Affected: 6.4.0.1; 6.4.0.2; 6.4.0.5; 6.4.0; 6.4.0.3; 6.4.0.4; +34 more |
| CVE-2026-20068 | 5.8 | Mar 4 | Multiple Cisco Products Snort 3 TBD Denial of Service Vulnerability Affected: 7.2.4; 7.2.5; 7.2.4.1; 7.4.0; 7.2.5.1; 7.4.1; +22 more |
| CVE-2026-20067 | 5.8 | Mar 4 | Multiple Cisco Products Snort 3 TBD Denial of Service Vulnerability Affected: 7.0.0; 7.0.0.1; 7.0.1; 7.1.0; 7.0.1.1; 7.1.0.1; +34 more |
| CVE-2026-20066 | 5.8 | Mar 4 | Multiple Cisco Products Snort 3 TBD Denial of Service Vulnerability Affected: 7.4.0; 7.4.1; 7.4.1.1; 7.6.0; 7.4.2; 7.4.2.1; +10 more |
| CVE-2026-20065 | 5.8 | Mar 4 | Multiple Cisco Products Snort 3 TBD Denial of Service Vulnerability Affected: 7.0.0; 7.0.0.1; 7.0.1; 7.1.0; 7.0.1.1; 7.1.0.1; +34 more |
| CVE-2026-20058 | 5.8 | Mar 4 | Cisco Secure Firewall Threat Defense Software Snort 3 Visual Basic for Application Denial of Service Vulnerability Affected: 7.2.0; 7.2.0.1; 7.2.1; 7.3.0; 7.2.2; 7.2.3; +31 more |
| CVE-2026-20057 | 5.8 | Mar 4 | Cisco Secure Firewall Threat Defense Software Snort 3 Visual Basic for Application Denial of Service Vulnerability Affected: 7.2.0; 7.2.0.1; 7.2.1; 7.3.0; 7.2.2; 7.2.3; +31 more |
| CVE-2026-20054 | 5.8 | Mar 4 | Cisco Secure Firewall Threat Defense Software Snort 3 Visual Basic for Application Infinite Loop Denial of Service Vulnerability Affected: 7.2.0; 7.2.0.1; 7.2.1; 7.3.0; 7.2.2; 7.2.3; +31 more |
| CVE-2026-20053 | 5.8 | Mar 4 | Cisco Secure Firewall Threat Defense Software Snort 3 Visual Basic for Application Heap Overflow Denial of Service Vulnerability Affected: 7.2.0; 7.2.0.1; 7.2.1; 7.3.0; 7.2.2; 7.2.3; +31 more |
| CVE-2026-20052 | 5.8 | Mar 4 | Cisco Secure Firewall Threat Defense Software Snort 3 Memory Management Denial of Service Vulnerability Affected: 7.4.0; 7.4.1; 7.4.1.1; 7.6.0; 7.4.2; 7.4.2.1 |
| CVE-2026-20007 | 5.8 | Mar 4 | Cisco Secure Firewall Threat Defense Software Snort Deep Inspection Bypass Vulnerability Affected: 6.4.0.1; 6.4.0.2; 6.4.0.5; 6.4.0; 6.4.0.3; 6.4.0.4; +34 more |
| CVE-2026-20006 | 5.8 | Mar 4 | Cisco Firepower Threat Defense Software and Cisco FirePOWER Services TLS with Snort 3 Denial of Service Vulnerability Affected: 7.2.0; 7.2.0.1; 7.2.1; 7.3.0; 7.2.2; 7.2.3; +27 more |
| CVE-2026-20015 | 5.8 | Mar 4 | A vulnerability in the IKEv2 feature of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, remote attacker to cause a DoS condition… Affected: 7.2.0; 7.2.0.1; 7.2.1; 7.2.2; 7.2.3; 7.2.4; +28 more |
| CVE-2026-20013 | 5.8 | Mar 4 | A vulnerability in the IKEv2 feature of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, remote attacker to cause a DoS condition… Affected: 6.4.0; 6.4.0.1; 6.4.0.3; 6.4.0.2; 6.4.0.4; 6.4.0.5; +34 more |
| CVE-2026-20005 | 5.8 | Mar 4 | Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine… Affected: 7.6.0; 7.6.1; 7.6.2; 7.6.2.1; 7.7.0; 7.7.10; +1 more |
| CVE-2026-20024 | 5.7 | Mar 4 | A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an authenticated, adjacent attacker to cause an affected… Affected: 6.4.0; 6.4.0.1; 6.4.0.3; 6.4.0.2; 6.4.0.4; 6.4.0.5; +34 more |
| CVE-2026-20020 | 5.7 | Mar 4 | A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, adjacent attacker to cause an affected… Affected: 6.4.0; 6.4.0.1; 6.4.0.3; 6.4.0.2; 6.4.0.4; 6.4.0.5; +34 more |
| CVE-2026-76445 New | 5.3 | Oct 21 | Multiple Cisco Products Snort 3 Denial of Service Vulnerability Affected: 7.0.0; 7.0.0.1; 7.0.1; 7.0.1.1; 7.0.2; 7.2.0; +34 more |
| CVE-2026-20121 | 5.3 | Sep 16 | CIsco FTD Bypass Access List Affected: 7.6.0; 7.7.0; 7.6.1; 7.6.2; 7.7.10; 7.7.11; +2 more |
| CVE-2026-20106 | 5.3 | Mar 4 | A vulnerability in the Remote Access SSL VPN, HTTP management and MUS functionality, of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat… Affected: 6.4.0; 6.4.0.1; 6.4.0.3; 6.4.0.2; 6.4.0.4; 6.4.0.5; +34 more |
| CVE-2026-20021 | 4.3 | Mar 4 | A vulnerability in the OSPF protocol of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an… Affected: 6.4.0; 6.4.0.1; 6.4.0.3; 6.4.0.2; 6.4.0.4; 6.4.0.5; +34 more |
| CVE-2026-20069 | 4.3 | Mar 4 | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software VPN Web Services Client-Side Request Smuggling Vulnerability Affected: 6.4.0.1; 6.4.0.2; 6.4.0.5; 6.4.0; 6.4.0.3; 6.4.0.4; +34 more |
Showing 44
