Cisco Secure Firewall Threat Defense FTD Software vulnerabilities

25 CVEs affecting Cisco Secure Firewall Threat Defense FTD Software, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-20336, published 2026-09-16.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-20026, published 2026-01-07. Medium severity, CVSS 5.8. EPSS: 0.7% chance of exploitation in the next 30 days. Multiple Cisco products are affected by a vulnerability in the processing of DCE/RPC requests that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to leak…
CVE-2026-20027, published 2026-01-07. Medium severity, CVSS 5.3. EPSS: 0.6% chance of exploitation in the next 30 days. Multiple Cisco products are affected by a vulnerability in the processing of DCE/RPC requests that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to leak…
CVE-2024-20260, published 2024-10-23. High severity, CVSS 8.6. EPSS: 0.6% chance of exploitation in the next 30 days. Update for September 16, 2026: The original 1.0 version of this advisory was specific to the Cisco Adaptive Security Virtual Appliance (ASAv) and Cisco Secure Firewall Threat Defense Virtual (FTDv)…
CVE-2026-20295, published 2026-09-16. High severity, CVSS 8.6. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure FMC Software and Cisco Secure FTD Software could allow an unauthenticated, remote attacker to exhaust the available…
CVE-2026-20250, published 2026-09-16. High severity, CVSS 8.6. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability in Datagram TLS (DTLS) message handling of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software for Cisco Secure…
CVE-2026-20121, published 2026-09-16. Medium severity, CVSS 5.3. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability in the access control list (ACL) Object Group Search (OGS) implementation of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense…
CVE-2026-20135, published 2026-09-16. High severity, CVSS 8.6. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability in the TLS 1.3 implementation in Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause an affected device to reload…
CVE-2026-20329, published 2026-09-16. Critical severity, CVSS 9.9. EPSS: 0.4% chance of exploitation in the next 30 days. As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure…
CVE-2026-20018, published 2026-03-04. Medium severity, CVSS 5.9. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability in the sftunnel functionality of Cisco Secure Firewall Management Center (FMC) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an authenticated, remote…
CVE-2026-20120, published 2026-09-16. Medium severity, CVSS 5.8. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability in the access control list (ACL) Object Group Search (OGS) implementation of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense…

Latest

CVE-2026-20336, published 2026-09-16. High severity, CVSS 8.8. EPSS: 0.2% chance of exploitation in the next 30 days. As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure…
CVE-2026-20335, published 2026-09-16. High severity, CVSS 8.1. EPSS: 0.3% chance of exploitation in the next 30 days. As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure…
CVE-2026-20334, published 2026-09-16. High severity, CVSS 8.4. EPSS: 0.3% chance of exploitation in the next 30 days. As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure…
CVE-2026-20333, published 2026-09-16. High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days. As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure…
CVE-2026-20332, published 2026-09-16. Critical severity, CVSS 9.9. EPSS: 0.3% chance of exploitation in the next 30 days. As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure…
CVE-2026-20323, published 2026-09-16. High severity, CVSS 8.3. EPSS: 0.1% chance of exploitation in the next 30 days. A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure FMC Software and Cisco Secure FTD Software could allow an unauthenticated, adjacent attacker to impersonate the…
CVE-2026-20290, published 2026-09-16. Medium severity, CVSS 5.8. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability in SSL/TLS certificate parsing in the Snort 2 Detection Engine of Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the…
CVE-2026-20249, published 2026-09-16. High severity, CVSS 8.6. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability in the certification authentication feature of Internet Key Exchange version 2 (IKEv2) for Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure…