CVE-2026-20006Medium· 5.8▾ SunlitA vulnerability in the TLS cryptography functionality of the Snort 3 Detection Engine of Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to unexpec…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 31.9 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Aug 20.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.4%
A vulnerability in the TLS cryptography functionality of the Snort 3 Detection Engine of Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to unexpectedly restart, resulting in a denial of service (DoS) condition.
This vulnerability is due to improper implementation of the TLS protocol. An attacker could exploit this vulnerability by sending a crafted TLS packet to an affected system. A successful exploit could allow the attacker to cause a device that is running Cisco Secure FTD Software to drop network traffic, resulting in a DoS condition. Note: TLS 1.3 is not affected by this vulnerability.
secure_firewall_threat_defense = 7.2.0secure_firewall_threat_defense = 7.2.0.1secure_firewall_threat_defense = 7.2.1secure_firewall_threat_defense = 7.2.2secure_firewall_threat_defense = 7.2.3secure_firewall_threat_defense = 7.2.4secure_firewall_threat_defense = 7.2.4.1secure_firewall_threat_defense = 7.2.5secure_firewall_threat_defense = 7.2.5.1secure_firewall_threat_defense = 7.2.5.2secure_firewall_threat_defense = 7.2.6secure_firewall_threat_defense = 7.2.7secure_firewall_threat_defense = 7.2.8secure_firewall_threat_defense = 7.2.8.1secure_firewall_threat_defense = 7.2.9secure_firewall_threat_defense = 7.2.10secure_firewall_threat_defense = 7.2.10.2secure_firewall_threat_defense = 7.3.0secure_firewall_threat_defense = 7.3.1secure_firewall_threat_defense = 7.3.1.1secure_firewall_threat_defense = 7.3.1.2secure_firewall_threat_defense = 7.4.0secure_firewall_threat_defense = 7.4.1secure_firewall_threat_defense = 7.4.1.1secure_firewall_threat_defense = 7.4.2secure_firewall_threat_defense = 7.4.2.1secure_firewall_threat_defense = 7.4.2.2secure_firewall_threat_defense = 7.4.2.3secure_firewall_threat_defense = 7.4.2.4secure_firewall_threat_defense = 7.6.0secure_firewall_threat_defense = 7.6.1secure_firewall_threat_defense = 7.6.2secure_firewall_threat_defense = 7.6.2.1Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2025-20224Medium· 5.8A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker t…
CVE-2026-20012High· 8.6A vulnerability in the Internet Key Exchange version 2 (IKEv2) feature of Cisco IOS Software, Cisco IOS XE Software, Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, and Cisco Secure Firewall Threat Defense (FTD) Softwar…
CVE-2026-20052Medium· 5.8A vulnerability in the memory management handling for the Snort 3 Detection Engine of Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart. …
CVE-2026-20007Medium· 5.8A vulnerability in the Snort 2 and Snort 3 deep packet inspection of Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass configured Snort rules and allow traffic onto the network …
CVE-2021-1448High· 7.8A vulnerability in the CLI of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to execute arbitrary commands with root privileges on the underlying operating system of an affected device that is …
CVE-2021-1445High· 8.6Multiple vulnerabilities in Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device