{"schema_version":1,"title":"Cisco Firepower Threat Defense Software vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 32 vulnerabilities in Cisco Firepower Threat Defense Software: 0 in the last 7 days and 11 in the last 90 days, 8 of them critical and 3 exploited in the wild. The most recent, CVE-2026-20334, was published on 16 September 2026.","url":"https://junglewise.ai/threats/technologies/firepower-threat-defense-software","json_url":"https://junglewise.ai/threats/technologies/firepower-threat-defense-software.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/firepower-threat-defense-software","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":10,"all_time":32,"critical":8,"exploited":3,"last_7_days":0,"last_30_days":10,"last_90_days":11,"last_365_days":29},"latest":[{"cve":"CVE-2026-20334","cvss":8.4,"epss":0.0026,"slug":"cve-2026-20334-cisco-secure-firewall-improper-adherence-to-coding-standards","title":"Cisco Secure Firewall improper adherence to coding standards","severity":"high","exploited":false,"published_at":"2026-09-16T21:17:10.917+00:00","url":"https://junglewise.ai/threats/cve-2026-20334-cisco-secure-firewall-improper-adherence-to-coding-standards"},{"cve":"CVE-2026-20333","cvss":8.8,"epss":0.0032,"slug":"cve-2026-20333-cisco-secure-firewall-asa-ftd-fmc-incorrect-comparison-in","title":"Cisco Secure Firewall ASA/FTD/FMC incorrect comparison in security context","severity":"high","exploited":false,"published_at":"2026-09-16T21:17:10.69+00:00","url":"https://junglewise.ai/threats/cve-2026-20333-cisco-secure-firewall-asa-ftd-fmc-incorrect-comparison-in"},{"cve":"CVE-2026-20332","cvss":9.9,"epss":0.003,"slug":"cve-2026-20332-cisco-secure-firewall-asa-ftd-fmc-access-control-vulnerability","title":"Cisco Secure Firewall ASA/FTD/FMC access control vulnerability","severity":"critical","exploited":false,"published_at":"2026-09-16T21:17:10.48+00:00","url":"https://junglewise.ai/threats/cve-2026-20332-cisco-secure-firewall-asa-ftd-fmc-access-control-vulnerability"},{"cve":"CVE-2026-20250","cvss":8.6,"epss":0.0055,"slug":"cve-2026-20250-cisco-secure-firewall-asa-and-ftd-dtls-denial-of-service","title":"Cisco Secure Firewall ASA and FTD DTLS denial of service","severity":"high","exploited":false,"published_at":"2026-09-16T21:17:08.713+00:00","url":"https://junglewise.ai/threats/cve-2026-20250-cisco-secure-firewall-asa-and-ftd-dtls-denial-of-service"},{"cve":"CVE-2026-20249","cvss":8.6,"epss":0.004,"slug":"cve-2026-20249-cisco-secure-firewall-ikev2-certificate-authentication-denial-of","title":"Cisco Secure Firewall IKEv2 certificate authentication denial of service","severity":"high","exploited":false,"published_at":"2026-09-16T21:17:08.517+00:00","url":"https://junglewise.ai/threats/cve-2026-20249-cisco-secure-firewall-ikev2-certificate-authentication-denial-of"},{"cve":"CVE-2026-20222","cvss":7.4,"epss":0.0017,"slug":"cve-2026-20222-cisco-secure-firewall-asa-and-ftd-eigrp-denial-of-service","title":"Cisco Secure Firewall ASA and FTD EIGRP denial of service","severity":"high","exploited":false,"published_at":"2026-09-16T21:17:07.91+00:00","url":"https://junglewise.ai/threats/cve-2026-20222-cisco-secure-firewall-asa-and-ftd-eigrp-denial-of-service"},{"cve":"CVE-2026-20135","cvss":8.6,"epss":0.0046,"slug":"cve-2026-20135-cisco-secure-firewall-threat-defense-tls-1-3-denial-of-service","title":"Cisco Secure Firewall Threat Defense TLS 1.3 denial of service","severity":"high","exploited":false,"published_at":"2026-09-16T21:17:07.587+00:00","url":"https://junglewise.ai/threats/cve-2026-20135-cisco-secure-firewall-threat-defense-tls-1-3-denial-of-service"},{"cve":"CVE-2026-20330","cvss":9.9,"epss":0.0034,"slug":"cve-2026-20330-cisco-secure-firewall-improper-input-validation-in-asa-ftd-and","title":"Cisco Secure Firewall improper input validation in ASA, FTD, and FMC","severity":"critical","exploited":false,"published_at":"2026-09-16T20:17:23.81+00:00","url":"https://junglewise.ai/threats/cve-2026-20330-cisco-secure-firewall-improper-input-validation-in-asa-ftd-and"},{"cve":"CVE-2026-20329","cvss":9.9,"epss":0.0045,"slug":"cve-2026-20329-cisco-secure-firewall-improper-exception-handling-and-input","title":"Cisco Secure Firewall improper exception handling and input validation","severity":"critical","exploited":false,"published_at":"2026-09-16T20:17:23.6+00:00","url":"https://junglewise.ai/threats/cve-2026-20329-cisco-secure-firewall-improper-exception-handling-and-input"},{"cve":"CVE-2026-20331","cvss":9.6,"epss":0.0023,"slug":"cve-2026-20331-cisco-secure-firewall-protection-mechanism-failure","title":"Cisco Secure Firewall protection mechanism failure","severity":"critical","exploited":false,"published_at":"2026-09-16T17:17:17.107+00:00","url":"https://junglewise.ai/threats/cve-2026-20331-cisco-secure-firewall-protection-mechanism-failure"},{"cve":"CVE-2026-20349","cvss":8.6,"epss":0.0101,"slug":"cve-2026-20349-cisco-secure-firewall-asa-and-ftd-denial-of-service-in-ssl-vpn","title":"A vulnerability in the Remote Access SSL VPN service for Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure F","severity":"critical","exploited":true,"published_at":"2026-08-11T17:17:48.833+00:00","url":"https://junglewise.ai/threats/cve-2026-20349-cisco-secure-firewall-asa-and-ftd-denial-of-service-in-ssl-vpn"},{"cve":"CVE-2026-20025","cvss":6.8,"epss":0.0005,"slug":"cve-2026-20025-cisco-asa-and-ftd-software-heap-corruption-in-ospf-protocol","title":"Cisco ASA and FTD Software heap corruption in OSPF protocol","severity":"medium","exploited":false,"published_at":"2026-03-04T19:16:15.547+00:00","url":"https://junglewise.ai/threats/cve-2026-20025-cisco-asa-and-ftd-software-heap-corruption-in-ospf-protocol"},{"cve":"CVE-2026-20024","cvss":6.8,"epss":0.0019,"slug":"cve-2026-20024-cisco-asa-and-ftd-software-heap-corruption-in-ospf-protocol","title":"Cisco ASA and FTD Software heap corruption in OSPF protocol","severity":"medium","exploited":false,"published_at":"2026-03-04T19:16:15.113+00:00","url":"https://junglewise.ai/threats/cve-2026-20024-cisco-asa-and-ftd-software-heap-corruption-in-ospf-protocol"},{"cve":"CVE-2026-20022","cvss":6.1,"epss":0.0019,"slug":"cve-2026-20022-cisco-secure-firewall-asa-and-ftd-ospf-dos-via-insufficient-input","title":"Cisco Secure Firewall ASA and FTD OSPF DoS via insufficient input validation","severity":"medium","exploited":false,"published_at":"2026-03-04T19:16:12.64+00:00","url":"https://junglewise.ai/threats/cve-2026-20022-cisco-secure-firewall-asa-and-ftd-ospf-dos-via-insufficient-input"},{"cve":"CVE-2026-20021","cvss":4.3,"epss":0.002,"slug":"cve-2026-20021-cisco-secure-firewall-asa-and-ftd-ospf-protocol-denial-of-service","title":"Cisco Secure Firewall ASA and FTD OSPF protocol denial of service","severity":"medium","exploited":false,"published_at":"2026-03-04T19:16:12.15+00:00","url":"https://junglewise.ai/threats/cve-2026-20021-cisco-secure-firewall-asa-and-ftd-ospf-protocol-denial-of-service"},{"cve":"CVE-2026-20020","cvss":6.8,"epss":0.0025,"slug":"cve-2026-20020-cisco-secure-firewall-asa-and-ftd-ospf-buffer-overflow","title":"Cisco Secure Firewall ASA and FTD OSPF buffer overflow","severity":"medium","exploited":false,"published_at":"2026-03-04T19:16:11.687+00:00","url":"https://junglewise.ai/threats/cve-2026-20020-cisco-secure-firewall-asa-and-ftd-ospf-buffer-overflow"},{"cve":"CVE-2026-20102","cvss":6.1,"epss":0.0026,"slug":"cve-2026-20102-cisco-secure-firewall-asa-saml-reflected-xss","title":"Cisco Secure Firewall ASA SAML reflected XSS","severity":"medium","exploited":false,"published_at":"2026-03-04T18:16:25.62+00:00","url":"https://junglewise.ai/threats/cve-2026-20102-cisco-secure-firewall-asa-saml-reflected-xss"},{"cve":"CVE-2026-20101","cvss":8.6,"epss":0.0035,"slug":"cve-2026-20101-cisco-secure-firewall-asa-and-ftd-saml-2-0-sso-denial-of-service","title":"Cisco Secure Firewall ASA and FTD SAML 2.0 SSO denial of service","severity":"high","exploited":false,"published_at":"2026-03-04T18:16:25.137+00:00","url":"https://junglewise.ai/threats/cve-2026-20101-cisco-secure-firewall-asa-and-ftd-saml-2-0-sso-denial-of-service"},{"cve":"CVE-2026-20100","cvss":7.7,"epss":0.0028,"slug":"cve-2026-20100-cisco-secure-firewall-asa-and-ftd-remote-access-ssl-vpn-denial-of","title":"Cisco Secure Firewall ASA and FTD Remote Access SSL VPN denial of service","severity":"high","exploited":false,"published_at":"2026-03-04T18:16:24.653+00:00","url":"https://junglewise.ai/threats/cve-2026-20100-cisco-secure-firewall-asa-and-ftd-remote-access-ssl-vpn-denial-of"},{"cve":"CVE-2026-20073","cvss":5.8,"epss":0.0038,"slug":"cve-2026-20073-cisco-secure-firewall-asa-and-ftd-access-control-bypass","title":"Cisco Secure Firewall ASA and FTD access control bypass","severity":"medium","exploited":false,"published_at":"2026-03-04T18:16:23.64+00:00","url":"https://junglewise.ai/threats/cve-2026-20073-cisco-secure-firewall-asa-and-ftd-access-control-bypass"},{"cve":"CVE-2026-20070","cvss":6.1,"epss":0.0026,"slug":"cve-2026-20070-cisco-secure-firewall-asa-and-ftd-cross-site-scripting-in-vpn-web","title":"Cisco Secure Firewall ASA and FTD cross-site scripting in VPN web services","severity":"medium","exploited":false,"published_at":"2026-03-04T18:16:23.17+00:00","url":"https://junglewise.ai/threats/cve-2026-20070-cisco-secure-firewall-asa-and-ftd-cross-site-scripting-in-vpn-web"},{"cve":"CVE-2026-20069","cvss":4.3,"epss":0.0001,"slug":"cve-2026-20069-cisco-asa-and-ftd-request-smuggling-in-vpn-web-services","title":"Cisco ASA and FTD Request Smuggling in VPN Web Services","severity":"medium","exploited":false,"published_at":"2026-03-04T18:16:22.717+00:00","url":"https://junglewise.ai/threats/cve-2026-20069-cisco-asa-and-ftd-request-smuggling-in-vpn-web-services"},{"cve":"CVE-2026-20067","cvss":5.8,"epss":0.0045,"slug":"cve-2026-20067-cisco-snort-3-detection-engine-denial-of-service","title":"Cisco Snort 3 detection engine denial of service","severity":"medium","exploited":false,"published_at":"2026-03-04T18:16:21.95+00:00","url":"https://junglewise.ai/threats/cve-2026-20067-cisco-snort-3-detection-engine-denial-of-service"},{"cve":"CVE-2026-20058","cvss":5.8,"epss":0.0039,"slug":"cve-2026-20058-cisco-snort-3-vba-decompression-denial-of-service","title":"Cisco Snort 3 VBA decompression denial of service","severity":"medium","exploited":false,"published_at":"2026-03-04T18:16:20.643+00:00","url":"https://junglewise.ai/threats/cve-2026-20058-cisco-snort-3-vba-decompression-denial-of-service"},{"cve":"CVE-2026-20054","cvss":5.8,"epss":0.0043,"slug":"cve-2026-20054-cisco-snort-3-vba-decompression-denial-of-service","title":"Cisco Snort 3 VBA decompression denial of service","severity":"medium","exploited":false,"published_at":"2026-03-04T18:16:19.92+00:00","url":"https://junglewise.ai/threats/cve-2026-20054-cisco-snort-3-vba-decompression-denial-of-service"}],"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":1,"exploited":1,"vulnerabilities":1},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":4,"exploited":0,"vulnerabilities":10},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"Cisco IOS","slug":"ios","vulnerabilities":69,"url":"https://junglewise.ai/threats/technologies/ios"},{"name":"Cisco IOS XE","slug":"ios-xe","vulnerabilities":53,"url":"https://junglewise.ai/threats/technologies/ios-xe"},{"name":"Cisco Identity Services Engine","slug":"identity-services-engine","vulnerabilities":51,"url":"https://junglewise.ai/threats/technologies/identity-services-engine"},{"name":"Cisco IOS XR","slug":"ios-xr","vulnerabilities":30,"url":"https://junglewise.ai/threats/technologies/ios-xr"},{"name":"Cisco IOS XE Software","slug":"ios-xe-software","vulnerabilities":27,"url":"https://junglewise.ai/threats/technologies/ios-xe-software"},{"name":"Cisco Firepower Threat Defense","slug":"firepower-threat-defense","vulnerabilities":22,"url":"https://junglewise.ai/threats/technologies/firepower-threat-defense"},{"name":"Cisco Adaptive Security Appliance Software","slug":"secure-firewall-asa-software","vulnerabilities":22,"url":"https://junglewise.ai/threats/technologies/secure-firewall-asa-software"},{"name":"Cisco Ios Software","slug":"ios-software","vulnerabilities":19,"url":"https://junglewise.ai/threats/technologies/ios-software"},{"name":"Cisco ISE Passive Identity Connector","slug":"ise-passive-identity-connector","vulnerabilities":19,"url":"https://junglewise.ai/threats/technologies/ise-passive-identity-connector"},{"name":"Cisco Secure Firewall Management Center","slug":"secure-firewall-management-center","vulnerabilities":16,"url":"https://junglewise.ai/threats/technologies/secure-firewall-management-center"},{"name":"Cisco Catalyst SD-WAN Manager","slug":"catalyst-sd-wan-manager","vulnerabilities":12,"url":"https://junglewise.ai/threats/technologies/catalyst-sd-wan-manager"},{"name":"Cisco Adaptive Security Appliance (ASA)","slug":"adaptive-security-appliance-asa","vulnerabilities":10,"url":"https://junglewise.ai/threats/technologies/adaptive-security-appliance-asa"}],"technology":{"hub":true,"name":"Cisco Firepower Threat Defense Software","slug":"firepower-threat-defense-software","vendor":{"name":"Cisco","slug":"cisco","url":"https://junglewise.ai/threats/vendors/cisco"},"aliases":["secure-firewall-threat-defense-ftd","secure-firewall-threat-defense-software"],"category":"firmware","homepage":"https://www.cisco.com/c/en/us/products/security/firewalls/index.html","description":"A unified software image that integrates firewall and intrusion prevention capabilities for network security appliances.","url":"https://junglewise.ai/threats/technologies/firepower-threat-defense-software"},"most_severe":[{"cve":"CVE-2025-20333","cvss":9.9,"epss":0.7065,"slug":"cve-2025-20333-cisco-asa-and-ftd-buffer-overflow-in-vpn-web-server","title":"A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat D","severity":"critical","exploited":true,"published_at":"2025-09-25T16:15:32.073+00:00","url":"https://junglewise.ai/threats/cve-2025-20333-cisco-asa-and-ftd-buffer-overflow-in-vpn-web-server"},{"cve":"CVE-2026-20349","cvss":8.6,"epss":0.0101,"slug":"cve-2026-20349-cisco-secure-firewall-asa-and-ftd-denial-of-service-in-ssl-vpn","title":"A vulnerability in the Remote Access SSL VPN service for Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure F","severity":"critical","exploited":true,"published_at":"2026-08-11T17:17:48.833+00:00","url":"https://junglewise.ai/threats/cve-2026-20349-cisco-secure-firewall-asa-and-ftd-denial-of-service-in-ssl-vpn"},{"cve":"CVE-2025-20362","cvss":6.5,"epss":0.8709,"slug":"cve-2025-20362-cisco-secure-firewall-asa-and-ftd-missing-authorization-in-vpn","title":"Update: On November 5, 2025, Cisco became aware of a new attack variant against devices running Cisco Secure ASA Software or Cisco Secure FT","severity":"critical","exploited":true,"published_at":"2025-09-25T16:15:32.28+00:00","url":"https://junglewise.ai/threats/cve-2025-20362-cisco-secure-firewall-asa-and-ftd-missing-authorization-in-vpn"},{"cve":"CVE-2026-20329","cvss":9.9,"epss":0.0045,"slug":"cve-2026-20329-cisco-secure-firewall-improper-exception-handling-and-input","title":"Cisco Secure Firewall improper exception handling and input validation","severity":"critical","exploited":false,"published_at":"2026-09-16T20:17:23.6+00:00","url":"https://junglewise.ai/threats/cve-2026-20329-cisco-secure-firewall-improper-exception-handling-and-input"},{"cve":"CVE-2026-20330","cvss":9.9,"epss":0.0034,"slug":"cve-2026-20330-cisco-secure-firewall-improper-input-validation-in-asa-ftd-and","title":"Cisco Secure Firewall improper input validation in ASA, FTD, and FMC","severity":"critical","exploited":false,"published_at":"2026-09-16T20:17:23.81+00:00","url":"https://junglewise.ai/threats/cve-2026-20330-cisco-secure-firewall-improper-input-validation-in-asa-ftd-and"},{"cve":"CVE-2026-20332","cvss":9.9,"epss":0.003,"slug":"cve-2026-20332-cisco-secure-firewall-asa-ftd-fmc-access-control-vulnerability","title":"Cisco Secure Firewall ASA/FTD/FMC access control vulnerability","severity":"critical","exploited":false,"published_at":"2026-09-16T21:17:10.48+00:00","url":"https://junglewise.ai/threats/cve-2026-20332-cisco-secure-firewall-asa-ftd-fmc-access-control-vulnerability"},{"cve":"CVE-2026-20331","cvss":9.6,"epss":0.0023,"slug":"cve-2026-20331-cisco-secure-firewall-protection-mechanism-failure","title":"Cisco Secure Firewall protection mechanism failure","severity":"critical","exploited":false,"published_at":"2026-09-16T17:17:17.107+00:00","url":"https://junglewise.ai/threats/cve-2026-20331-cisco-secure-firewall-protection-mechanism-failure"},{"cve":"CVE-2025-20363","cvss":9,"epss":0.0692,"slug":"cve-2025-20363-cisco-multiple-platforms-code-execution-in-web-services","title":"Cisco multiple platforms code execution in web services","severity":"critical","exploited":false,"published_at":"2025-09-25T16:15:32.497+00:00","url":"https://junglewise.ai/threats/cve-2025-20363-cisco-multiple-platforms-code-execution-in-web-services"},{"cve":"CVE-2026-20333","cvss":8.8,"epss":0.0032,"slug":"cve-2026-20333-cisco-secure-firewall-asa-ftd-fmc-incorrect-comparison-in","title":"Cisco Secure Firewall ASA/FTD/FMC incorrect comparison in security context","severity":"high","exploited":false,"published_at":"2026-09-16T21:17:10.69+00:00","url":"https://junglewise.ai/threats/cve-2026-20333-cisco-secure-firewall-asa-ftd-fmc-incorrect-comparison-in"},{"cve":"CVE-2026-20250","cvss":8.6,"epss":0.0055,"slug":"cve-2026-20250-cisco-secure-firewall-asa-and-ftd-dtls-denial-of-service","title":"Cisco Secure Firewall ASA and FTD DTLS denial of service","severity":"high","exploited":false,"published_at":"2026-09-16T21:17:08.713+00:00","url":"https://junglewise.ai/threats/cve-2026-20250-cisco-secure-firewall-asa-and-ftd-dtls-denial-of-service"}],"generated_at":"2026-09-26T09:11:00.170868+00:00"}