Known vulnerabilities in Cisco Secure Firewall Threat Defense (FTD)

Software CPE: cpe:2.3:h:cisco_systems:cisco_ftd:*:*:*:*:*:*:*:*
Total vulnerabilities: 223
Public exploits: 6
Known exploited (KEV): 13

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cisco Secure Firewall Threat Defense (FTD) Cisco Secure Firewall Threat Defense (FTD) is affected by 223 known vulnerabilities: 3 critical, 34 high, 137 medium, 49 low Critical High Medium Low

Vulnerabilities (223)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU150914 - Signed to Unsigned Conversion Error
CVE-2026-20248
CWE-195 Medium
No
No
7.0.10, 7.2.12, 7.4.8, 7.6.6, 7.7.13, 9.16.4.103, 9.18.4.94, 9.20.4.49, 9.22.3.26, 9.23.1.47, 9.24.1.26, 10.0.2 18.09.2026 SB20260918124
#VU150902 - Improper Access Control
CVE-2026-20121
CWE-284 Medium
No
No
7.6.4, 7.6.6, 7.7.13, 9.22.2.32, 9.22.3, 9.22.3.5, 9.22.3.26, 9.23.1.26, 9.23.1.32, 9.23.1.47, 9.24.1, 9.24.1.5, 9.24.1.9, 9.24.1.11, 9.24.1.26, 10.0.0, 10.0.2 18.09.2026 SB20260918124
#VU150891 - Improper Access Control
CVE-2026-20120
CWE-284 Medium
No
No
7.6.4, 7.6.6, 7.7.13, 9.22.2.32, 9.22.3, 9.22.3.5, 9.22.3.26, 9.23.1.26, 9.23.1.32, 9.23.1.47, 9.24.1, 9.24.1.5, 9.24.1.9, 9.24.1.11, 9.24.1.26, 10.0.0, 10.0.2 18.09.2026 SB20260918124
#VU150872 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2026-20154
CWE-835 Medium
No
No
7.0.9, 7.0.10, 7.2.11, 7.2.12, 7.4.7, 7.4.8, 7.6.6, 7.7.13, 9.16.4.89, 9.16.4.92, 9.16.4.103, 9.18.4.71, 9.18.4.76, 9.18.4.82, 9.18.4.94, 9.20.4.19, 9.20.4.22, 9.20.4.28, 9.20.4.30, 9.20.4.34, 9.20.4.49, 9.22.2.32, 9.22.3, 9.22.3.5, 9.22.3.26, 9.23.1.26, 9.23.1.32, 9.23.1.47, 9.24.1, 9.24.1.5, 9.24.1.9, 9.24.1.11, 9.24.1.26, 10.0.0, 10.0.2 18.09.2026 SB20260918124
#VU150756 - Missing Release of Resource after Effective Lifetime
CVE-2026-20250
CWE-772 High
No
No
7.6.6, 7.7.13, 10.0.2 17.09.2026 SB20260917254
#VU150755 - Missing release of memory after effective lifetime
CVE-2026-20222
CWE-401 Medium
No
No
7.4.8, 7.6.6, 7.7.13, 10.0.2 17.09.2026 SB20260917253
#VU150750 - Improper Access Control
CVE-2026-20332
CWE-284 Medium
No
No
7.0.10, 7.2.12, 7.4.8, 7.6.6, 7.7.13, 10.0.2, 10.1.0 17.09.2026 SB20260917252
#VU150751 - Incorrect Comparison
CVE-2026-20333
CWE-697 Medium
No
No
7.0.10, 7.2.12, 7.4.8, 7.6.6, 7.7.13, 10.0.2, 10.1.0 17.09.2026 SB20260917252
#VU150752 - Improper Adherence to Coding Standards
CVE-2026-20334
CWE-710 Medium
No
No
7.0.10, 7.2.12, 7.4.8, 7.6.6, 7.7.13, 10.0.2, 10.1.0 17.09.2026 SB20260917252
#VU150753 - Incorrect Calculation
CVE-2026-20335
CWE-682 Medium
No
No
7.0.10, 7.2.12, 7.4.8, 7.6.6, 7.7.13, 10.0.2, 10.1.0 17.09.2026 SB20260917252
#VU150754 - Improper control of a resource through its lifetime
CVE-2026-20336
CWE-664 Medium
No
No
7.0.10, 7.2.12, 7.4.8, 7.6.6, 7.7.13, 10.0.2, 10.1.0 17.09.2026 SB20260917252
#VU150747 - Improper Check or Handling of Exceptional Conditions
CVE-2026-20329
CWE-703 Medium
No
No
7.0.10, 7.2.12, 7.4.8, 7.6.6, 7.7.13, 10.0.2, 10.1.0 17.09.2026 SB20260917252
#VU150748 - Improper Neutralization
CVE-2026-20330
CWE-707 Medium
No
No
7.0.10, 7.2.12, 7.4.8, 7.6.6, 7.7.13, 10.0.2, 10.1.0 17.09.2026 SB20260917252
#VU150749 - Protection Mechanism Failure
CVE-2026-20331
CWE-693 Medium
No
No
7.0.10, 7.2.12, 7.4.8, 7.6.6, 7.7.13, 10.0.2, 10.1.0 17.09.2026 SB20260917252
#VU150687 - Double Free
CVE-2026-20135
CWE-415 Medium
No
No
7.0.10, 7.2.12, 7.4.7, 7.4.8, 7.6.6, 7.7.13, 10.0.0, 10.0.2 17.09.2026 SB20260917234
#VU150678 - Buffer Access with Incorrect Length Value
CVE-2026-20290
CWE-805 Medium
No
No
7.0.10, 7.2.12, 7.4.8, 7.6.6 17.09.2026 SB20260917234
#VU150677 - Improper Certificate Validation
CVE-2026-20323
CWE-295 Medium
No
No
7.2.12, 7.4.8, 7.6.6, 7.7.13, 10.0.2 17.09.2026 SB20260917231
#VU150676 - Uncontrolled Memory Allocation
CVE-2026-20295
CWE-789 Medium
No
No
7.0.10, 7.2.12, 7.4.7, 7.6.6, 7.7.13 17.09.2026 SB20260917231
#VU150234 - Type conversion
CVE-2026-20249
CWE-704 Medium
No
No
7.0.10, 7.2.12, 7.4.8, 7.6.6, 7.7.13 16.09.2026 SB2026091660
#VU141542 - Improper Clearing of Heap Memory Before Release ('Heap Inspection')
CVE-2026-20349
CWE-244 High
No
Exploited
7.0.9.1-1, 7.2.11.1-2, 7.4.7.1-1, 7.6.4.1-2, 7.7.11.1-2, 10.0.0.1-2 12.08.2026 SB2026081227


Showing elements 1 - 20 out of 223