What’s Vulnerable › Products

Cisco Firepower Threat Defense Software vulnerabilities

333 known vulnerabilities, 14 confirmed exploited in the wild (CISA KEV), 104 published in the last 12 months.

Check whether your Cisco Firepower Threat Defense Software version is affected

Exploited Cisco Firepower Threat Defense Software vulnerabilities

• CVE-2026-76418 — Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service Vulnerability
• CVE-2026-20349 — Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability
• CVE-2025-20362 — Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability
• CVE-2025-20333 — Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability
• CVE-2024-20481 — Cisco ASA and FTD Denial-of-Service Vulnerability
• CVE-2024-20359 — Cisco ASA and FTD Privilege Escalation Vulnerability
• CVE-2024-20353 — Cisco ASA and FTD Denial of Service Vulnerability
• CVE-2020-3259 — Cisco ASA and FTD Information Disclosure Vulnerability
• CVE-2023-44487 — HTTP/2 Rapid Reset Attack Vulnerability
• CVE-2023-20269 — Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability
• CVE-2021-44228 — Apache Log4j2 Remote Code Execution Vulnerability
• CVE-2020-3580 — Cisco ASA and FTD Cross-Site Scripting (XSS) Vulnerability
• CVE-2020-3452 — Cisco ASA and FTD Read-Only Path Traversal Vulnerability
• CVE-2018-0296 — Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability

Latest Cisco Firepower Threat Defense Software vulnerabilities

• CVE-2026-76418 — Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service Vulnerability (CVSS 8.6) — exploited
• CVE-2026-76489 — Multiple Cisco Products Snort 3 Generic File Processing Memory Exhaustion Denial of Service Vulnerability (CVSS 5.8)
• CVE-2026-76445 — Multiple Cisco Products Snort 3 Denial of Service Vulnerability (CVSS 5.3)
• CVE-2026-20356 — Multiple Cisco Products Snort 3 Software Hardening Release: October 2026 (CVSS 7.5)
• CVE-2026-20236 — Multiple Cisco Products Snort 3 Software Hardening Release: October 2026 (CVSS 7.5)
• CVE-2026-20291 — Multiple Cisco Products Snort 3 Software Hardening Release: October 2026 (CVSS 7.8)
• CVE-2026-20221 — Multiple Cisco Products Snort 3 Generic Routing Encapsulation Denial of Service Vulnerabilities (CVSS 5.8)
• CVE-2026-20197 — Multiple Cisco Products Snort 3 Teredo Protocol Denial of Service Vulnerability (CVSS 5.8)
• CVE-2026-20218 — Cisco Secure Firewall Threat Defense Snort 3 Visual Basic for Applications Buffer Overflow Denial of Service Vulnerability (CVSS 5.8)
• CVE-2026-20179 — Multiple Cisco Products Snort 3 Generic Routing Encapsulation Denial of Service Vulnerabilities (CVSS 5.8)
• CVE-2026-20043 — Multiple Cisco Products Snort 3 Software Hardening Release: October 2026 (CVSS 9.0)
• CVE-2026-20019 — Multiple Cisco Products Snort 3 Netflow Denial of Service Vulnerabilities (CVSS 5.8)
• CVE-2026-20011 — Multiple Cisco Products Snort 3 SMTP MIME Denial of Service Vulnerability (CVSS 5.8)
• CVE-2026-20336 — Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Resource Lifetime Management Vulnerabilities (CVSS 8.8)
• CVE-2026-20335 — Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Incorrect Calculation Vulnerabilities (CVSS 8.1)
• CVE-2026-20334 — Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Coding Standards Vulnerabilities (CVSS 8.4)
• CVE-2026-20333 — Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Incorrect Comparison Vulnerabilities (CVSS 8.8)
• CVE-2026-20332 — Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Improper Access Control Vulnerabilities (CVSS 9.9)
• CVE-2026-20323 — Cisco Secure Firewall Management Center and Secure Firewall Threat Defense Software sftunnel Unauthorized Authentication Bypass Vulnerability (CVSS 8.3)
• CVE-2026-20295 — Cisco Secure Firewall Management Center and Secure Firewall Threat Defense Software sftunnel Memory Exhaustion Denial of Service Vulnerability (CVSS 8.6)
• CVE-2026-20290 — Cisco Secure Firewall Threat Defense Software Snort 2 SSL/TLS Denial of Service Vulnerability (CVSS 5.8)
• CVE-2026-20250 — Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software for Firepower 3100 and 4200 Series DTLS Denial of Service Vulnerability (CVSS 8.6)
• CVE-2026-20249 — Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software IKEv2 Certificate Authentication Denial of Service Vulnerability (CVSS 8.6)
• CVE-2026-20248 — Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software TCP DNS Denial of Service Vulnerability (CVSS 6.8)
• CVE-2026-20222 — Cisco Secure Adaptive Security Appliance Software and Secure Firewall Threat Defense Software EIGRP Denial of Service Vulnerability (CVSS 7.4)