Known vulnerabilities in Cisco Firewall Threat Defense (FTD)
Vendor:
Cisco Systems, Inc
Software:
Cisco Firewall Threat Defense (FTD)
Software CPE:
cpe:2.3:h:cisco_systems:cisco_ftd:*:*:*:*:*:*:*:*
Website:
https://www.cisco.com
Total vulnerabilities:
204
Public exploits:
6
Known exploited (KEV):
13
Highest CVSSv4 Score:
10
Breakdown by Severity Chart
7.0.9.1
7.2.11.1
7.4.7.1
7.6.4.1
7.7.11.1-1
7.7.11.1
7.0.9.1-1
7.2.11.1-2
7.4.7.1-1
7.6.4.1-2
7.7.11.1-2
10.0.0.1-2
7.4.7
7.7.10.1
7.0.9
7.7.11
7.7.12
10.0.0
10.0.1
7.4.6
7.6.5
7.2.11
7.4.5
7.6.4
7.2.10.3-1
7.0.8.2-2
7.4.4
7.6.3
7.4.3
7.0.8.1
7.4.2.4
7.2.10.2
7.6.2.1
7.2.10.1
7.0.7
7.0.8
7.7.0
7.7.10
7.6.2
7.4.2.3
7.6.1
7.2.10
7.4.2.2
7.4
7.3
7.2
7.1
7.0
9.12.4.65
9.12.4.67
9.16.4.55
9.16.4.61
9.16.4.62
9.16.4.67
9.16.4.70
9.16.4.71
9.17.1.39
9.17.1.45
9.18.4.24
9.18.4.29
9.18.4.34
9.18.4.40
9.18.4.47
9.19.1.31
9.19.1.37
9.20.2.21
9.20.2.22
9.20.3
9.20.3.4
9.20.3.7
9.22.1.1
9.14.4.24
9.16.4.48
9.18.4.8
9.19.1.24
9.19.1.27
7.2.8.1
7.2.8
7.2.3.1
7.4.2.1
7.2.9
7.4.2
7.0.6.3
7.6.0
6.4.0.18
7.0.6.1
7.0.6.2
7.2.5.1
7.2.5.2
7.4.1.1
6.6.7.2
7.3.1.2
7.2.6
7.2.7
7.4.0
7.4.1
9.20.2
9.16.4.57
9.18.4.22
9.19.1.28
9.20.2.10
6.4.0.17
2.9.14.0
2.9.16
2.9.18
2.9.19
2.9.20
2.9.20.2
2.9.21
2.9.18.6
2.9.20.4
3.1.0.100
3.1.0.500
3.1.21.1
3.1.36.100
3.1.7.2
3.1.21.400
9.12.4.62
9.16.4.39
9.16.4.42
9.17.1.33
9.18.3.56
9.18.4
9.18.4.5
9.19.1.22
9.20.1
9.20.1.5
6.2.3.1
6.2.3.10
6.2.3.11
6.2.3.14
6.2.3.18
6.2.3.2
6.2.3.3
6.2.3.5
6.2.3.6
6.2.3.7
6.2.3.8
6.2.3.9
6.4.0.1
6.4.0.11
6.4.0.14
6.4.0.16
6.4.0.5
6.4.0.9
6.6.7.1
7.0.0.1
7.0.1.1
7.0.2.1
7.0.3
7.0.5
7.0.6
7.1.0.3
7.2.4
7.2.4.1
7.2.5
7.3.0
7.3.1
7.3.1.1
9.12.4.55
9.12.4.56
9.12.4.58
9.14.4.22
9.14.4.23
9.16.4.14
9.16.4.18
9.16.4.19
9.16.4.27
9.16.4.38
9.16.4.9
9.17.1.30
9.18.2.7
9.18.2.8
9.18.3
9.18.3.39
9.18.3.46
9.18.3.53
9.18.3.55
9.19.1
9.19.1.12
9.19.1.18
9.19.1.5
9.19.1.9
9.8.4.48
7.2.3
7.2.2
6.6.7
002.011(001.159)
r2111
002.006(001.255)
002.008(001.189)
002.010(001.195)
002.010(001.196)
002.011(001.163)
002.012(000.423)
009.012(004.052)
009.014(004.017)
082.013(000.251)
2.10.1.207
2.11.1.182
2.12.0.31
2.12.0.432
2.12.0.438
2.12.0.450
2.3.1.230
2.6.1.259
2.8.1.186
2.8.1.190
006.006
007.000(001)
009.012
009.012(004.042)
009.014(004.008)
009.018(000.108)
099.012(004.055)
099.014(004.023)
099.016(004.023)
099.017(002.135)
099.018(002.007)
099.018(030.062)
099.019(001.080)
099.019(021.020)
099.019(022.024)
099.019(023.018)
9.16.3.15
009.012(004.051)
009.016(003.016)
099.014(004.027)
099.017(002.139)
099.018(002.032)
099.019(001.129)
099.019(021.038)
099.019(022.035)
099.020(000.006)
009.016(002.005)
009.016(003.012)
009.017(001.010)
099.017(028.079)
099.019(030.002)
9.18.1.3
009.008(004.044)
006.004(000.015)
009.008(004.046)
007.000(004)
007.002(001)
009.014(004.013)
009.016(003.015)
009.016(003.099)
009.016(004)
009.017(001.017)
009.018(001.003)
009.018(001.099)
009.018(002)
009.019(000.099)
099.014(004.026)
099.017(002.138)
099.018(002.027)
099.018(028.006)
099.018(030.074)
099.019(001.112)
099.019(021.034)
099.019(022.033)
099.019(023.030)
099.019(030.003)
099.020(000.002)
009.016(003.011)
9.14.4.12
9.14.4.6
9.14.4.7
9.16.2.13
9.16.2.14
9.16.3.14
9.16.3.3
9.17.1.10
9.17.1.11
9.17.1.7
9.17.1.9
006.006(007)
007.000(002)
007.002(000)
009.018(001)
9.14.4
9.14.4.13
9.14.4.14
9.14.4.15
9.14.4.17
9.16.3
9.16.3.19
9.16.3.23
9.16.4
9.17.1.13
9.17.1.15
9.17.1.20
9.18.1
9.18.2
9.18.2.5
9.10.1
9.10.1.10
9.10.1.11
9.10.1.17
9.10.1.2
9.10.1.22
9.10.1.27
9.10.1.30
9.10.1.32
9.10.1.37
9.10.1.40
9.10.1.42
9.10.1.44
9.10.1.7
9.12.1
9.12.1.2
9.12.1.3
9.12.2
9.12.2.1
9.12.2.4
9.12.2.5
9.12.2.9
9.12.3
9.12.3.12
9.12.3.2
9.12.3.7
9.12.3.9
9.12.4
9.12.4.10
9.12.4.13
9.12.4.18
9.12.4.2
9.12.4.24
9.12.4.26
9.12.4.29
9.12.4.30
9.12.4.35
9.12.4.37
9.12.4.38
9.12.4.39
9.12.4.4
9.12.4.40
9.12.4.41
9.12.4.47
9.12.4.48
9.12.4.50
9.12.4.52
9.12.4.54
9.12.4.7
9.12.4.8
9.13.1
9.13.1.10
9.13.1.12
9.13.1.13
9.13.1.16
9.13.1.19
9.13.1.2
9.13.1.21
9.13.1.7
9.14.1
9.14.1.10
9.14.1.15
9.14.1.19
9.14.1.30
9.14.1.6
9.14.2
9.14.2.13
9.14.2.15
9.14.2.4
9.14.2.8
9.14.3
9.14.3.1
9.14.3.11
9.14.3.13
9.14.3.15
9.14.3.18
9.14.3.9
9.15.1
9.15.1.1
9.15.1.10
9.15.1.15
9.15.1.16
9.15.1.17
9.15.1.21
9.15.1.7
9.16.1
9.16.1.28
9.16.2
9.16.2.11
9.16.2.3
9.16.2.7
9.17.1
9.6.0.128
9.6.1
9.6.1.10
9.6.1.11
9.6.1.12
9.6.1.19
9.6.1.3
9.6.1.5
9.6.2
9.6.2.1
9.6.2.11
9.6.2.13
9.6.2.16
9.6.2.2
9.6.2.21
9.6.2.22
9.6.2.23
9.6.2.3
9.6.2.4
9.6.2.7
9.6.3
9.6.3.1
9.6.3.11
9.6.3.12
9.6.3.14
9.6.3.17
9.6.3.20
9.6.3.23
9.6.3.24
9.6.3.3
9.6.3.8
9.6.3.9
9.6.4
9.6.4.10
9.6.4.12
9.6.4.14
9.6.4.17
9.6.4.18
9.6.4.20
9.6.4.22
9.6.4.23
9.6.4.24
9.6.4.25
9.6.4.29
9.6.4.3
9.6.4.30
9.6.4.34
9.6.4.36
9.6.4.40
9.6.4.41
9.6.4.42
9.6.4.45
9.6.4.5
9.6.4.6
9.6.4.8
9.7.1
9.7.1.10
9.7.1.15
9.7.1.16
9.7.1.19
9.7.1.2
9.7.1.21
9.7.1.23
9.7.1.24
9.7.1.4
9.7.1.7
9.7.1.8
9.8.1
9.8.1.5
9.8.1.7
9.8.2
9.8.2.14
9.8.2.15
9.8.2.17
9.8.2.20
9.8.2.24
9.8.2.26
9.8.2.28
9.8.2.33
9.8.2.35
9.8.2.38
9.8.2.45
9.8.2.8
9.8.3
9.8.3.11
9.8.3.14
9.8.3.16
9.8.3.18
9.8.3.21
9.8.3.26
9.8.3.29
9.8.3.8
9.8.4
9.8.4.10
9.8.4.12
9.8.4.15
9.8.4.17
9.8.4.20
9.8.4.22
9.8.4.25
9.8.4.26
9.8.4.29
9.8.4.3
9.8.4.32
9.8.4.33
9.8.4.34
9.8.4.35
9.8.4.39
9.8.4.40
9.8.4.41
9.8.4.43
9.8.4.44
9.8.4.45
9.8.4.46
9.8.4.7
9.8.4.8
9.9.1
9.9.1.2
9.9.1.3
9.9.1.4
9.9.1.5
9.9.2
9.9.2.1
9.9.2.14
9.9.2.18
9.9.2.235
9.9.2.25
9.9.2.27
9.9.2.32
9.9.2.36
9.9.2.40
9.9.2.47
9.9.2.50
9.9.2.52
9.9.2.56
9.9.2.59
9.9.2.61
9.9.2.66
9.9.2.67
9.9.2.74
9.9.2.80
9.9.2.83
9.9.2.85
9.9.2.9
7.2.1
7.1.0.2
1.2.17
1.0.22
7.2.0.1
Cisco_FTD_SSP_FP3K_Hotfix_Q-7.1.0.3-2.sh.REL.tar
Cisco_FTD_SSP_Hotfix_P-7.1.0.2-2.sh.REL.tar
Cisco_FTD_SSP_FP2K_Hotfix_P-7.1.0.2-2.sh.REL.tar
Cisco_FTD_SSP_FP1K_Hotfix_P-7.1.0.2-2.sh.REL.tar
Cisco_FTD_Hotfix_P-7.1.0.2-2.sh.REL.tar
7.0.4
7.2.0
Cisco_FTD_SSP_Hotfix_AA-6.7.0.4-2.sh.REL.tar
Cisco_FTD_SSP_FP2K_Hotfix_AA-6.7.0.4-2.sh.REL.tar
Cisco_FTD_SSP_FP1K_Hotfix_AA-6.7.0.4-2.sh.REL.tar
Cisco_FTD_Hotfix_AA-6.7.0.4-2.sh.REL.tar
7.0.2
6.4.0.15
6.7.0.4
7.1.0
6.6.5.2
7.1.0.1
6.6.3
6.2.3.17
6.7.0.1
7.0.0
7.0.1
6.7.0.3
6.6.5.1
6.6.5
6.4.0.13
6.7.0
6.7.0.2
6.6.4
6.4.0.12
6.6.1
6.5.0.5
6.4.0.10
6.3.0.6
6.6.0.1
6.2.3.16
6.6.0
6.5.0.4
6.4.0.7
6.4.0.6
6.3.0.5
6.2.3.15
6.2.2.1
6.5.0.3
6.3.0.2
6.2.3.12
6.5.0.2
6.4.0.8
6.5.0
6.4.0.3
6.4.0.4
6.0
6.4.0.2
6.3.0.4
6.2.3.13
6.4.0
6.1.0
6.2.3.4
6.3.0
6.2.3
6.2.2
6.2.1
6.2.0
6.1.0.1
6.0.1
Vulnerabilities (204)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU141542 - Improper Clearing of Heap Memory Before Release ('Heap Inspection') CVE-2026-20349 |
CWE-244 | High | 7.0.9.1-1, 7.2.11.1-2, 7.4.7.1-1, 7.6.4.1-2, 7.7.11.1-2, 10.0.0.1-2 | 12.08.2026 |
SB2026081227 |
||
| #VU124595 - Missing release of memory after effective lifetime CVE-2026-20012 |
CWE-401 | Medium | 7.0.9, 7.2.11, 7.4.3, 7.6.4, 7.7.11 | 25.03.2026 |
SB20260325183 |
||
| #VU123684 - Argument Injection or Modification CVE-2026-20063 |
CWE-88 | Low | 7.6.4, 7.7.11 | 10.03.2026 |
SB2026031053 |
||
| #VU123683 - Argument Injection or Modification CVE-2026-20017 |
CWE-88 | Low | 7.0.9, 7.2.11, 7.4.4, 7.6.4, 7.7.11 | 10.03.2026 |
SB2026031053 |
||
| #VU123678 - Argument Injection or Modification CVE-2026-20016 |
CWE-88 | Low | 7.0.9, 7.2.11, 7.4.4, 7.6.4, 7.7.11 | 10.03.2026 |
SB2026031047 |
||
| #VU123677 - Argument Injection or Modification CVE-2026-20064 |
CWE-88 | Low | 7.0.9, 7.2.11, 7.4.3, 7.6.4, 7.7.11 | 10.03.2026 |
SB2026031053 |
||
| #VU123676 - Improper Resource Shutdown or Release CVE-2026-20050 |
CWE-404 | Medium | 7.2.11, 7.4.4, 7.6.4, 7.7.11 | 10.03.2026 |
SB2026031046 |
||
| #VU123662 - Improper input validation CVE-2026-20025 |
CWE-20 | Low | 7.0.9, 7.2.11, 7.4.3, 7.6.4, 7.7.11 | 10.03.2026 |
SB2026031001 |
||
| #VU123661 - Heap-based Buffer Overflow CVE-2026-20024 |
CWE-122 | Low | 7.0.9, 7.2.10, 7.4.3, 7.6.1, 7.7.10 | 10.03.2026 |
SB2026031001 |
||
| #VU123659 - Out-of-bounds write CVE-2026-20022 |
CWE-787 | Medium | 7.0.9, 7.2.11, 7.4.4, 7.6.4, 7.7.11 | 09.03.2026 |
SB2026031001 |
||
| #VU123657 - Memory corruption CVE-2026-20020 |
CWE-119 | Low | 7.0.9, 7.2.11, 7.4.3, 7.6.4, 7.7.11 | 09.03.2026 |
SB2026031001 |
||
| #VU123656 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2026-20102 |
CWE-79 | Low | 7.0.9, 7.2.11, 7.4.3 | 09.03.2026 |
SB2026030966 |
||
| #VU123655 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2026-20070 |
CWE-79 | Low | 7.0.9, 7.2.11, 7.4.3, 7.6.4, 7.7.11 | 09.03.2026 |
SB2026030965 |
||
| #VU123652 - Improper Access Control CVE-2026-20073 |
CWE-284 | Medium | 7.0.9, 7.2.11, 7.4.4, 7.6.4, 7.7.11 | 09.03.2026 |
SB2026030960 |
||
| #VU123651 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2026-20069 |
CWE-444 | Medium | 7.0.9, 7.2.11, 7.4.3, 7.6.4, 7.7.11 | 09.03.2026 |
SB2026030959 |
||
| #VU123618 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2026-20008 |
CWE-78 | Low | 7.0.9, 7.2.11, 7.4.4, 7.6.4, 7.7.11 | 06.03.2026 |
SB2026030648 |
||
| #VU123617 - Deserialization of Untrusted Data CVE-2026-20131 |
CWE-502 | Critical | 7.0.9, 7.2.11, 7.4.6, 7.6.5, 7.7.12, 10.0.1 | 06.03.2026 |
SB2026030636 |
||
| #VU123552 - Error Handling CVE-2026-20068 |
CWE-388 | Medium | 7.2.11, 7.4.4, 7.6.4, 7.7.11 | 04.03.2026 |
SB2026030501 |
||
| #VU123551 - Error Handling CVE-2026-20067 |
CWE-388 | Medium | 7.0.9, 7.2.11, 7.4.4, 7.6.4, 7.7.11 | 04.03.2026 |
SB2026030501 |
||
| #VU123549 - Improper Initialization CVE-2026-20065 |
CWE-665 | Medium | 7.0.9, 7.2.11, 7.4.3, 7.6.1 | 04.03.2026 |
SB2026030502 |
Showing elements 1 - 20 out of 204