CS
Product
Cisco Secure Firewall Threat Defense (FTD) Software
On CISA KEVExploited in the wild
80
CVEs
3
On KEV
9.9
Max CVSS
13
New 30D
Severity mix
Critical 7High 26Medium 47Low 0
Watch
Add Cisco Secure Firewall Threat Defense (FTD) Software to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-20333 In wildKEV | 9.9 | Sep 25 | Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability Affected: 6.2.3; 6.2.3.1; 6.2.3.2; 6.2.3.3; 6.2.3.4; 6.2.3.5; +34 more |
| CVE-2026-20349 In wildKEV | 8.6 | Aug 11 | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service Vulnerability Affected: 7.0.0; 7.0.0.1; 7.0.1; 7.0.1.1; 7.0.2; 7.2.0; +34 more |
| CVE-2025-20362 In wildKEV | 8.6 | Sep 25 | Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability Affected: 6.2.3; 6.2.3.1; 6.2.3.2; 6.2.3.3; 6.2.3.4; 6.2.3.5; +34 more |
| CVE-2026-20332 | 9.9 | Sep 16 | Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Improper Access Control Vulnerabilities Affected: 7.0.0.1; 7.0.1; 7.0.1.1; 7.0.2; 7.0.2.1; 7.0.3; +34 more |
| CVE-2026-20330 | 9.9 | Sep 16 | Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Improper Neutralization Vulnerabilities Affected: 7.0.0.1; 7.0.1; 7.0.1.1; 7.0.2; 7.0.2.1; 7.0.3; +34 more |
| CVE-2026-20329 | 9.9 | Sep 16 | Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Exceptional Conditions Handling Vulnerabilities Affected: 7.0.0.1; 7.0.1; 7.0.1.1; 7.0.2; 7.0.2.1; 7.0.3; +34 more |
| CVE-2026-20331 | 9.6 | Sep 16 | Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Protection Mechanism Failure Vulnerabilities Affected: 7.0.0.1; 7.0.1; 7.0.1.1; 7.0.2; 7.0.2.1; 7.0.3; +34 more |
| CVE-2025-20359 | 9.1 | Oct 15 | Multiple Cisco Products Snort 3 MIME Information Disclosure or Denial of Service Vulnerability Affected: 7.4.1; 7.4.1.1; 7.6.0; 7.4.2; 7.4.2.1; 7.7.0; +4 more |
| CVE-2026-20043 | 9.0 | Oct 21 | Multiple Cisco Products Snort 3 Software Hardening Release: October 2026 Affected: 7.0.0; 7.0.0.1; 7.0.1; 7.0.1.1; 7.0.2; 7.0.2.1; +34 more |
| CVE-2026-20333 | 8.8 | Sep 16 | Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Incorrect Comparison Vulnerabilities Affected: 7.0.0.1; 7.0.1; 7.0.1.1; 7.0.2; 7.0.2.1; 7.0.3; +34 more |
| CVE-2026-20336 | 8.8 | Sep 16 | Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Resource Lifetime Management Vulnerabilities Affected: 7.0.0.1; 7.0.1; 7.0.1.1; 7.0.2; 7.0.2.1; 7.0.3; +34 more |
| CVE-2026-76418 New | 8.6 | Oct 28 | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service Vulnerability Affected: 7.0.0; 7.0.0.1; 7.0.1; 7.0.1.1; 7.0.2; 7.2.0; +34 more |
| CVE-2026-20154 | 8.6 | Sep 16 | Cisco Secure Firewall Adaptive Security Appliance Software and Secure Firewall Threat Defense Software Logging Denial of Service Affected: 7.0.0; 7.0.0.1; 7.0.1; 7.0.1.1; 7.0.2; 7.2.0; +34 more |
| CVE-2026-20135 | 8.6 | Sep 16 | Cisco Secure Firewall Threat Defense Software TLS 1.3 Denial of Service Vulnerability Affected: 7.0.0; 7.0.0.1; 7.0.1; 7.0.1.1; 7.0.2; 7.2.0; +34 more |
| CVE-2026-20249 | 8.6 | Sep 16 | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software IKEv2 Certificate Authentication Denial of Service Vulnerability Affected: 7.0.0; 7.0.0.1; 7.0.1; 7.0.1.1; 7.0.2; 7.2.0; +34 more |
| CVE-2026-20295 | 8.6 | Sep 16 | Cisco Secure Firewall Management Center and Secure Firewall Threat Defense Software sftunnel Memory Exhaustion Denial of Service Vulnerability Affected: 7.0.0; 7.0.0.1; 7.0.1; 7.0.1.1; 7.0.2; 7.2.0; +34 more |
| CVE-2026-20250 | 8.6 | Sep 16 | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software for Firepower 3100 and 4200 Series DTLS Denial of Service Vulnerability Affected: 7.6.0; 7.7.0; 7.6.1; 7.6.2; 7.7.10; 7.7.11; +4 more |
| CVE-2026-20012 | 8.6 | Mar 25 | A vulnerability in the Internet Key Exchange version 2 (IKEv2) feature of Cisco IOS Software, Cisco IOS XE Software, Cisco Secure Firewall Adaptive Security Appliance (ASA)… Affected: 6.2.3; 6.2.3.1; 6.2.3.2; 6.2.3.3; 6.2.3.4; 6.2.3.5; +34 more |
| CVE-2026-20103 | 8.6 | Mar 4 | A vulnerability in the Remote Access SSL VPN functionality of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD) Software… Affected: 6.4.0.16; 6.4.0.17; 6.4.0.18; 7.0.4; 7.0.5; 7.0.6; +34 more |
| CVE-2026-20101 | 8.6 | Mar 4 | A vulnerability in the SAML 2.0 single sign-on (SSO) feature of Cisco Secure Firewall ASA Software and Secure FTD Software could allow an unauthenticated, remote attacker to cause… Affected: 6.4.0; 6.4.0.1; 6.4.0.3; 6.4.0.2; 6.4.0.4; 6.4.0.5; +34 more |
| CVE-2026-20039 | 8.6 | Mar 4 | Cisco Adaptive Security Appliance and Firepower Threat Defense Software SSL VPN Authentication Denial of Service Vulnerability Affected: 6.4.0.1; 6.4.0.2; 6.4.0.5; 6.4.0; 6.4.0.3; 6.4.0.4; +34 more |
| CVE-2024-20260 | 8.6 | Oct 23 | Cisco Adaptive Security Virtual Appliance and Secure Firewall Threat Defense Virtual SSL VPN Denial of Service Vulnerability Affected: 7.0.0; 7.0.0.1; 7.0.1; 7.0.1.1; 7.0.2; 7.2.0; +34 more |
| CVE-2026-20334 | 8.4 | Sep 16 | Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Coding Standards Vulnerabilities Affected: 7.0.0.1; 7.0.1; 7.0.1.1; 7.0.2; 7.0.2.1; 7.0.3; +34 more |
| CVE-2026-20323 | 8.3 | Sep 16 | Cisco Secure Firewall Management Center and Secure Firewall Threat Defense Software sftunnel Unauthorized Authentication Bypass Vulnerability Affected: 7.0.0; 7.0.0.1; 7.0.1; 7.0.1.1; 7.0.2; 7.2.0; +34 more |
| CVE-2026-20335 | 8.1 | Sep 16 | Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Incorrect Calculation Vulnerabilities Affected: 7.0.0.1; 7.0.1; 7.0.1.1; 7.0.2; 7.0.2.1; 7.0.3; +34 more |
| CVE-2026-20291 | 7.8 | Oct 21 | Multiple Cisco Products Snort 3 Software Hardening Release: October 2026 Affected: 7.0.0; 7.0.0.1; 7.0.1; 7.0.1.1; 7.0.2; 7.2.0; +34 more |
| CVE-2026-20049 | 7.7 | Mar 4 | A vulnerability in the processing of Galois/Counter Mode (GCM)-encrypted Internet Key Exchange version 2 (IKEv2) IPsec traffic of Cisco Secure Firewall Adaptive Security Appliance… Affected: 6.4.0.10; 6.4.0.11; 6.4.0.12; 6.4.0.13; 6.4.0.14; 6.4.0.15; +34 more |
| CVE-2026-20014 | 7.7 | Mar 4 | A vulnerability in the IKEv2 feature of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an authenticated, remote attacker with valid VPN user… Affected: 7.2.0; 7.2.0.1; 7.2.1; 7.2.2; 7.2.3; 7.2.4; +30 more |
| CVE-2026-20105 | 7.7 | Mar 4 | A vulnerability in the Remote Access SSL VPN functionality of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD) Software… Affected: 6.4.0; 6.4.0.1; 6.4.0.3; 6.4.0.2; 6.4.0.4; 6.4.0.5; +34 more |
| CVE-2026-20100 | 7.7 | Mar 4 | A vulnerability in the LUA interperter of the Remote Access SSL VPN feature of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense… Affected: 6.4.0; 6.4.0.1; 6.4.0.3; 6.4.0.2; 6.4.0.4; 6.4.0.5; +34 more |
| CVE-2026-20356 | 7.5 | Oct 21 | Multiple Cisco Products Snort 3 Software Hardening Release: October 2026 Affected: 7.0.0; 7.0.0.1; 7.0.1; 7.0.1.1; 7.0.2; 7.2.0; +34 more |
| CVE-2026-20236 | 7.5 | Oct 21 | Multiple Cisco Products Snort 3 Software Hardening Release: October 2026 Affected: 7.0.0; 7.0.0.1; 7.0.1; 7.0.1.1; 7.0.2; 7.2.0; +34 more |
| CVE-2026-20222 | 7.4 | Sep 16 | Cisco Secure Adaptive Security Appliance Software and Secure Firewall Threat Defense Software EIGRP Denial of Service Vulnerability Affected: 7.3.0; 7.3.1; 7.3.1.1; 7.4.0; 7.4.1; 7.4.1.1; +19 more |
| CVE-2026-20248 | 6.8 | Sep 16 | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software TCP DNS Denial of Service Vulnerability Affected: 7.0.0; 7.0.0.1; 7.0.1; 7.0.1.1; 7.0.2; 7.2.0; +34 more |
| CVE-2026-20025 | 6.8 | Mar 4 | A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an authenticated, adjacent attacker to cause an affected… Affected: 6.4.0; 6.4.0.1; 6.4.0.3; 6.4.0.2; 6.4.0.4; 6.4.0.5; +34 more |
| CVE-2026-20050 | 6.8 | Mar 4 | Cisco Secure Firewall Threat Defense Decryption Policy Denial of Service Vulnerability Affected: 7.0.0; 7.0.0.1; 7.0.1; 7.1.0; 7.0.1.1; 7.1.0.1; +34 more |
| CVE-2026-20016 | 6.7 | Mar 4 | A vulnerability in the Cisco FXOS Software CLI feature for Cisco Secure Firewall ASA Software and Secure FTD Software could allow an authenticated, local attacker to execute… Affected: 7.0.0; 7.0.0.1; 7.0.1; 7.0.1.1; 7.0.2; 7.0.2.1; +34 more |
| CVE-2026-20064 | 6.5 | Mar 4 | A vulnerability in of Cisco Secure Firewall Threat Defense (FTD) Software could allow an authenticated, local attacker to cause the device to unexpectedly reload, causing a denial… Affected: 6.4.0; 6.4.0.1; 6.4.0.3; 6.4.0.2; 6.4.0.4; 6.4.0.5; +34 more |
| CVE-2026-20023 | 6.5 | Mar 4 | A vulnerability in the OSPF protocol of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an… Affected: 6.4.0; 6.4.0.1; 6.4.0.3; 6.4.0.2; 6.4.0.4; 6.4.0.5; +34 more |
| CVE-2026-20022 | 6.5 | Mar 4 | A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, adjacent attacker to cause an affected… Affected: 6.4.0; 6.4.0.1; 6.4.0.3; 6.4.0.2; 6.4.0.4; 6.4.0.5; +34 more |
| CVE-2026-20102 | 6.1 | Mar 4 | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software SAML Reflected Cross-Site Scripting Vulnerability Affected: 7.0.0; 7.0.0.1; 7.0.1; 7.1.0; 7.0.1.1; 7.1.0.1; +2 more |
| CVE-2026-20070 | 6.1 | Mar 4 | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software VPN Web Services Cross-Site Scripting Vulnerability Affected: 6.4.0.1; 6.4.0.2; 6.4.0.5; 6.4.0; 6.4.0.3; 6.4.0.4; +34 more |
| CVE-2026-20063 | 6.0 | Mar 4 | Cisco Secure FTD Software Authenticated Command Injection Vulnerability Affected: 7.6.0; 7.7.0; 7.6.1; 7.6.2; 7.7.10; 7.6.2.1; +1 more |
| CVE-2026-20017 | 6.0 | Mar 4 | Cisco Secure FTD Software Authenticated Command Injection Vulnerability Affected: 6.4.0.1; 6.4.0.2; 6.4.0.5; 6.4.0; 6.4.0.3; 6.4.0.4; +34 more |
| CVE-2026-20008 | 6.0 | Mar 4 | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Lua Code Injection Vulnerability Affected: 6.4.0.1; 6.4.0.2; 6.4.0.5; 6.4.0; 6.4.0.3; 6.4.0.4; +34 more |
| CVE-2026-20018 | 5.9 | Mar 4 | Cisco Firepower Management Center Software and Firepower Threat Defense Path Traversal Vulnerability Affected: 7.0.0; 7.0.0.1; 7.0.1; 7.1.0; 7.0.1.1; 7.1.0.1; +34 more |
| CVE-2026-76489 | 5.8 | Oct 21 | Multiple Cisco Products Snort 3 Generic File Processing Memory Exhaustion Denial of Service Vulnerability Affected: 7.0.0; 7.0.0.1; 7.0.1; 7.0.1.1; 7.0.2; 7.2.0; +34 more |
| CVE-2026-20221 | 5.8 | Oct 21 | Multiple Cisco Products Snort 3 Generic Routing Encapsulation Denial of Service Vulnerabilities Affected: 7.0.0; 7.0.0.1; 7.0.1; 7.0.1.1; 7.0.2; 7.2.0; +34 more |
| CVE-2026-20197 | 5.8 | Oct 21 | Multiple Cisco Products Snort 3 Teredo Protocol Denial of Service Vulnerability Affected: 7.0.0; 7.0.0.1; 7.0.1; 7.0.1.1; 7.0.2; 7.2.0; +34 more |
| CVE-2026-20218 | 5.8 | Oct 21 | Cisco Secure Firewall Threat Defense Snort 3 Visual Basic for Applications Buffer Overflow Denial of Service Vulnerability Affected: 7.2.0; 7.2.0.1; 7.2.1; 7.3.0; 7.2.2; 7.2.3; +34 more |
