{"schema_version":1,"title":"Cisco Firepower Threat Defense vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 22 vulnerabilities in Cisco Firepower Threat Defense: 0 in the last 7 days and 5 in the last 90 days, 3 of them critical and 3 exploited in the wild. The most recent, CVE-2026-20336, was published on 16 September 2026.","url":"https://junglewise.ai/threats/technologies/firepower-threat-defense","json_url":"https://junglewise.ai/threats/technologies/firepower-threat-defense.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/firepower-threat-defense","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":3,"all_time":22,"critical":3,"exploited":3,"last_7_days":0,"last_30_days":5,"last_90_days":5,"last_365_days":19},"latest":[{"cve":"CVE-2026-20336","cvss":8.8,"epss":0.002,"slug":"cve-2026-20336-cisco-secure-firewall-software-resource-lifecycle-vulnerability","title":"Cisco Secure Firewall software resource lifecycle vulnerability","severity":"high","exploited":false,"published_at":"2026-09-16T21:17:11.35+00:00","url":"https://junglewise.ai/threats/cve-2026-20336-cisco-secure-firewall-software-resource-lifecycle-vulnerability"},{"cve":"CVE-2026-20323","cvss":8.3,"epss":0.0009,"slug":"cve-2026-20323-cisco-secure-fmc-and-ftd-sftunnel-authentication-bypass","title":"Cisco Secure FMC and FTD sftunnel authentication bypass","severity":"high","exploited":false,"published_at":"2026-09-16T21:17:10.313+00:00","url":"https://junglewise.ai/threats/cve-2026-20323-cisco-secure-fmc-and-ftd-sftunnel-authentication-bypass"},{"cve":"CVE-2026-20295","cvss":8.6,"epss":0.0055,"slug":"cve-2026-20295-cisco-secure-fmc-and-ftd-memory-exhaustion-in-sftunnel","title":"Cisco Secure FMC and FTD memory exhaustion in sftunnel","severity":"high","exploited":false,"published_at":"2026-09-16T21:17:09.74+00:00","url":"https://junglewise.ai/threats/cve-2026-20295-cisco-secure-fmc-and-ftd-memory-exhaustion-in-sftunnel"},{"cve":"CVE-2026-20290","cvss":5.8,"epss":0.0019,"slug":"cve-2026-20290-cisco-secure-firewall-threat-defense-ssl-tls-denial-of-service-in","title":"Cisco Secure Firewall Threat Defense SSL/TLS denial of service in Snort 2","severity":"medium","exploited":false,"published_at":"2026-09-16T21:17:09.61+00:00","url":"https://junglewise.ai/threats/cve-2026-20290-cisco-secure-firewall-threat-defense-ssl-tls-denial-of-service-in"},{"cve":"CVE-2026-20120","cvss":5.8,"epss":0.0041,"slug":"cve-2026-20120-cisco-secure-firewall-asa-ftd-access-control-bypass-in-ogs","title":"Cisco Secure Firewall ASA/FTD access control bypass in OGS","severity":"medium","exploited":false,"published_at":"2026-09-16T21:17:07.343+00:00","url":"https://junglewise.ai/threats/cve-2026-20120-cisco-secure-firewall-asa-ftd-access-control-bypass-in-ogs"},{"cve":"CVE-2026-20064","cvss":6.5,"epss":0.001,"slug":"cve-2026-20064-cisco-secure-firewall-threat-defense-authenticated-dos-via-cli","title":"Cisco Secure Firewall Threat Defense authenticated DoS via CLI input validation","severity":"medium","exploited":false,"published_at":"2026-03-04T19:16:16.003+00:00","url":"https://junglewise.ai/threats/cve-2026-20064-cisco-secure-firewall-threat-defense-authenticated-dos-via-cli"},{"cve":"CVE-2026-20016","cvss":6,"epss":0.0001,"slug":"cve-2026-20016-cisco-secure-firewall-asa-and-ftd-command-injection-in-fxos-cli","title":"Cisco Secure Firewall ASA and FTD command injection in FXOS CLI","severity":"medium","exploited":false,"published_at":"2026-03-04T19:16:11.443+00:00","url":"https://junglewise.ai/threats/cve-2026-20016-cisco-secure-firewall-asa-and-ftd-command-injection-in-fxos-cli"},{"cve":"CVE-2026-20068","cvss":5.8,"epss":0.0041,"slug":"cve-2026-20068-cisco-snort-3-detection-engine-denial-of-service","title":"Cisco Snort 3 detection engine denial of service","severity":"medium","exploited":false,"published_at":"2026-03-04T18:16:22.33+00:00","url":"https://junglewise.ai/threats/cve-2026-20068-cisco-snort-3-detection-engine-denial-of-service"},{"cve":"CVE-2026-20066","cvss":5.8,"epss":0.0045,"slug":"cve-2026-20066-cisco-snort-3-detection-engine-denial-of-service-in-http","title":"Cisco Snort 3 Detection Engine denial of service in HTTP JavaScript normalization","severity":"medium","exploited":false,"published_at":"2026-03-04T18:16:21.67+00:00","url":"https://junglewise.ai/threats/cve-2026-20066-cisco-snort-3-detection-engine-denial-of-service-in-http"},{"cve":"CVE-2026-20065","cvss":5.8,"epss":0.0037,"slug":"cve-2026-20065-cisco-snort-3-detection-engine-denial-of-service","title":"Cisco Snort 3 Detection Engine denial of service","severity":"medium","exploited":false,"published_at":"2026-03-04T18:16:21.35+00:00","url":"https://junglewise.ai/threats/cve-2026-20065-cisco-snort-3-detection-engine-denial-of-service"},{"cve":"CVE-2026-20057","cvss":5.8,"epss":0.0043,"slug":"cve-2026-20057-cisco-snort-3-vba-decompression-denial-of-service","title":"Cisco Snort 3 VBA decompression denial of service","severity":"medium","exploited":false,"published_at":"2026-03-04T18:16:20.32+00:00","url":"https://junglewise.ai/threats/cve-2026-20057-cisco-snort-3-vba-decompression-denial-of-service"},{"cve":"CVE-2026-20053","cvss":5.8,"epss":0.0041,"slug":"cve-2026-20053-cisco-snort-3-vba-decompression-denial-of-service","title":"Cisco Snort 3 VBA decompression denial of service","severity":"medium","exploited":false,"published_at":"2026-03-04T18:16:19.607+00:00","url":"https://junglewise.ai/threats/cve-2026-20053-cisco-snort-3-vba-decompression-denial-of-service"},{"cve":"CVE-2026-20052","cvss":5.8,"epss":0.0041,"slug":"cve-2026-20052-cisco-secure-firewall-threat-defense-snort-3-memory-management","title":"Cisco Secure Firewall Threat Defense Snort 3 memory management denial of service","severity":"medium","exploited":false,"published_at":"2026-03-04T18:16:19.42+00:00","url":"https://junglewise.ai/threats/cve-2026-20052-cisco-secure-firewall-threat-defense-snort-3-memory-management"},{"cve":"CVE-2026-20050","cvss":6.8,"epss":0.0038,"slug":"cve-2026-20050-cisco-secure-firewall-threat-defense-ssl-decryption-denial-of","title":"Cisco Secure Firewall Threat Defense SSL decryption denial of service","severity":"medium","exploited":false,"published_at":"2026-03-04T18:16:19.173+00:00","url":"https://junglewise.ai/threats/cve-2026-20050-cisco-secure-firewall-threat-defense-ssl-decryption-denial-of"},{"cve":"CVE-2026-20017","cvss":6,"epss":0.0016,"slug":"cve-2026-20017-cisco-secure-ftd-command-injection-in-cli","title":"Cisco Secure FTD command injection in CLI","severity":"medium","exploited":false,"published_at":"2026-03-04T18:16:16.14+00:00","url":"https://junglewise.ai/threats/cve-2026-20017-cisco-secure-ftd-command-injection-in-cli"},{"cve":"CVE-2026-20007","cvss":5.8,"epss":0.0023,"slug":"cve-2026-20007-cisco-secure-firewall-threat-defense-snort-rules-bypass","title":"Cisco Secure Firewall Threat Defense Snort rules bypass","severity":"medium","exploited":false,"published_at":"2026-03-04T18:16:14.063+00:00","url":"https://junglewise.ai/threats/cve-2026-20007-cisco-secure-firewall-threat-defense-snort-rules-bypass"},{"cve":"CVE-2026-20006","cvss":5.8,"epss":0.0037,"slug":"cve-2026-20006-cisco-secure-firewall-threat-defense-tls-denial-of-service-in","title":"Cisco Secure Firewall Threat Defense TLS denial of service in Snort 3","severity":"medium","exploited":false,"published_at":"2026-03-04T18:16:13.803+00:00","url":"https://junglewise.ai/threats/cve-2026-20006-cisco-secure-firewall-threat-defense-tls-denial-of-service-in"},{"cve":"CVE-2026-20005","cvss":5.8,"epss":0.0049,"slug":"cve-2026-20005-cisco-snort-3-detection-engine-denial-of-service-in-ssl-handshake","title":"Cisco Snort 3 Detection Engine denial of service in SSL handshake parsing","severity":"medium","exploited":false,"published_at":"2026-03-04T17:16:18.11+00:00","url":"https://junglewise.ai/threats/cve-2026-20005-cisco-snort-3-detection-engine-denial-of-service-in-ssl-handshake"},{"cve":"CVE-2025-20359","cvss":6.5,"epss":0.0048,"slug":"cve-2025-20359-cisco-snort-3-buffer-under-read-in-http-mime-decoder","title":"Cisco Snort 3 buffer under-read in HTTP MIME decoder","severity":"medium","exploited":false,"published_at":"2025-10-15T17:15:49.23+00:00","url":"https://junglewise.ai/threats/cve-2025-20359-cisco-snort-3-buffer-under-read-in-http-mime-decoder"},{"cve":"CVE-2025-20362","cvss":6.5,"epss":0.8709,"slug":"cve-2025-20362-cisco-secure-firewall-asa-and-ftd-missing-authorization-in-vpn","title":"Update: On November 5, 2025, Cisco became aware of a new attack variant against devices running Cisco Secure ASA Software or Cisco Secure FT","severity":"critical","exploited":true,"published_at":"2025-09-25T16:15:32.28+00:00","url":"https://junglewise.ai/threats/cve-2025-20362-cisco-secure-firewall-asa-and-ftd-missing-authorization-in-vpn"},{"cve":"CVE-2025-20333","cvss":9.9,"epss":0.7065,"slug":"cve-2025-20333-cisco-asa-and-ftd-buffer-overflow-in-vpn-web-server","title":"A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat D","severity":"critical","exploited":true,"published_at":"2025-09-25T16:15:32.073+00:00","url":"https://junglewise.ai/threats/cve-2025-20333-cisco-asa-and-ftd-buffer-overflow-in-vpn-web-server"},{"cve":"CVE-2023-20269","cvss":9.1,"slug":"cve-2023-20269-cisco-adaptive-security-appliance-and-firepower-threat-defense","title":"Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability","severity":"critical","exploited":true,"published_at":"2023-09-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-20269-cisco-adaptive-security-appliance-and-firepower-threat-defense"}],"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":5},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"Cisco IOS","slug":"ios","vulnerabilities":69,"url":"https://junglewise.ai/threats/technologies/ios"},{"name":"Cisco IOS XE","slug":"ios-xe","vulnerabilities":53,"url":"https://junglewise.ai/threats/technologies/ios-xe"},{"name":"Cisco Identity Services Engine","slug":"identity-services-engine","vulnerabilities":51,"url":"https://junglewise.ai/threats/technologies/identity-services-engine"},{"name":"Cisco Firepower Threat Defense Software","slug":"firepower-threat-defense-software","vulnerabilities":32,"url":"https://junglewise.ai/threats/technologies/firepower-threat-defense-software"},{"name":"Cisco IOS XR","slug":"ios-xr","vulnerabilities":30,"url":"https://junglewise.ai/threats/technologies/ios-xr"},{"name":"Cisco IOS XE Software","slug":"ios-xe-software","vulnerabilities":27,"url":"https://junglewise.ai/threats/technologies/ios-xe-software"},{"name":"Cisco Adaptive Security Appliance Software","slug":"secure-firewall-asa-software","vulnerabilities":22,"url":"https://junglewise.ai/threats/technologies/secure-firewall-asa-software"},{"name":"Cisco Ios Software","slug":"ios-software","vulnerabilities":19,"url":"https://junglewise.ai/threats/technologies/ios-software"},{"name":"Cisco ISE Passive Identity Connector","slug":"ise-passive-identity-connector","vulnerabilities":19,"url":"https://junglewise.ai/threats/technologies/ise-passive-identity-connector"},{"name":"Cisco Secure Firewall Management Center","slug":"secure-firewall-management-center","vulnerabilities":16,"url":"https://junglewise.ai/threats/technologies/secure-firewall-management-center"},{"name":"Cisco Catalyst SD-WAN Manager","slug":"catalyst-sd-wan-manager","vulnerabilities":12,"url":"https://junglewise.ai/threats/technologies/catalyst-sd-wan-manager"},{"name":"Cisco Adaptive Security Appliance (ASA)","slug":"adaptive-security-appliance-asa","vulnerabilities":10,"url":"https://junglewise.ai/threats/technologies/adaptive-security-appliance-asa"}],"technology":{"hub":true,"name":"Cisco Firepower Threat Defense","slug":"firepower-threat-defense","vendor":{"name":"Cisco","slug":"cisco","url":"https://junglewise.ai/threats/vendors/cisco"},"aliases":["secure-firewall-threat-defense"],"homepage":"https://www.cisco.com/c/en/us/products/security/firewalls/index.html","description":"Cisco Firepower Threat Defense is an integrated software image providing firewall, VPN, and advanced threat protection capabilities.","url":"https://junglewise.ai/threats/technologies/firepower-threat-defense"},"most_severe":[{"cve":"CVE-2025-20333","cvss":9.9,"epss":0.7065,"slug":"cve-2025-20333-cisco-asa-and-ftd-buffer-overflow-in-vpn-web-server","title":"A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat D","severity":"critical","exploited":true,"published_at":"2025-09-25T16:15:32.073+00:00","url":"https://junglewise.ai/threats/cve-2025-20333-cisco-asa-and-ftd-buffer-overflow-in-vpn-web-server"},{"cve":"CVE-2023-20269","cvss":9.1,"slug":"cve-2023-20269-cisco-adaptive-security-appliance-and-firepower-threat-defense","title":"Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability","severity":"critical","exploited":true,"published_at":"2023-09-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-20269-cisco-adaptive-security-appliance-and-firepower-threat-defense"},{"cve":"CVE-2025-20362","cvss":6.5,"epss":0.8709,"slug":"cve-2025-20362-cisco-secure-firewall-asa-and-ftd-missing-authorization-in-vpn","title":"Update: On November 5, 2025, Cisco became aware of a new attack variant against devices running Cisco Secure ASA Software or Cisco Secure FT","severity":"critical","exploited":true,"published_at":"2025-09-25T16:15:32.28+00:00","url":"https://junglewise.ai/threats/cve-2025-20362-cisco-secure-firewall-asa-and-ftd-missing-authorization-in-vpn"},{"cve":"CVE-2026-20336","cvss":8.8,"epss":0.002,"slug":"cve-2026-20336-cisco-secure-firewall-software-resource-lifecycle-vulnerability","title":"Cisco Secure Firewall software resource lifecycle vulnerability","severity":"high","exploited":false,"published_at":"2026-09-16T21:17:11.35+00:00","url":"https://junglewise.ai/threats/cve-2026-20336-cisco-secure-firewall-software-resource-lifecycle-vulnerability"},{"cve":"CVE-2026-20295","cvss":8.6,"epss":0.0055,"slug":"cve-2026-20295-cisco-secure-fmc-and-ftd-memory-exhaustion-in-sftunnel","title":"Cisco Secure FMC and FTD memory exhaustion in sftunnel","severity":"high","exploited":false,"published_at":"2026-09-16T21:17:09.74+00:00","url":"https://junglewise.ai/threats/cve-2026-20295-cisco-secure-fmc-and-ftd-memory-exhaustion-in-sftunnel"},{"cve":"CVE-2026-20323","cvss":8.3,"epss":0.0009,"slug":"cve-2026-20323-cisco-secure-fmc-and-ftd-sftunnel-authentication-bypass","title":"Cisco Secure FMC and FTD sftunnel authentication bypass","severity":"high","exploited":false,"published_at":"2026-09-16T21:17:10.313+00:00","url":"https://junglewise.ai/threats/cve-2026-20323-cisco-secure-fmc-and-ftd-sftunnel-authentication-bypass"},{"cve":"CVE-2026-20050","cvss":6.8,"epss":0.0038,"slug":"cve-2026-20050-cisco-secure-firewall-threat-defense-ssl-decryption-denial-of","title":"Cisco Secure Firewall Threat Defense SSL decryption denial of service","severity":"medium","exploited":false,"published_at":"2026-03-04T18:16:19.173+00:00","url":"https://junglewise.ai/threats/cve-2026-20050-cisco-secure-firewall-threat-defense-ssl-decryption-denial-of"},{"cve":"CVE-2025-20359","cvss":6.5,"epss":0.0048,"slug":"cve-2025-20359-cisco-snort-3-buffer-under-read-in-http-mime-decoder","title":"Cisco Snort 3 buffer under-read in HTTP MIME decoder","severity":"medium","exploited":false,"published_at":"2025-10-15T17:15:49.23+00:00","url":"https://junglewise.ai/threats/cve-2025-20359-cisco-snort-3-buffer-under-read-in-http-mime-decoder"},{"cve":"CVE-2026-20064","cvss":6.5,"epss":0.001,"slug":"cve-2026-20064-cisco-secure-firewall-threat-defense-authenticated-dos-via-cli","title":"Cisco Secure Firewall Threat Defense authenticated DoS via CLI input validation","severity":"medium","exploited":false,"published_at":"2026-03-04T19:16:16.003+00:00","url":"https://junglewise.ai/threats/cve-2026-20064-cisco-secure-firewall-threat-defense-authenticated-dos-via-cli"},{"cve":"CVE-2026-20017","cvss":6,"epss":0.0016,"slug":"cve-2026-20017-cisco-secure-ftd-command-injection-in-cli","title":"Cisco Secure FTD command injection in CLI","severity":"medium","exploited":false,"published_at":"2026-03-04T18:16:16.14+00:00","url":"https://junglewise.ai/threats/cve-2026-20017-cisco-secure-ftd-command-injection-in-cli"}],"generated_at":"2026-09-26T09:11:00.170868+00:00"}