CVE-2026-20064

Published: Mar 4, 2026Modified: Jun 17, 2026

6.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Exploitability: 2.0 / Impact: 4.0

Source: psirt@cisco.com (Secondary)

Description

A vulnerability in of Cisco Secure Firewall Threat Defense (FTD) Software could allow an authenticated, local attacker to cause the device to unexpectedly reload, causing a denial of service (DoS) condition. This vulnerability is due to improper validation of user-supplied input. An attacker with a low-privileged account could exploit this vulnerability by using crafted commands at the CLI prompt. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition.

Affected (76)

Products: Cisco: Firepower Threat Defense Software

Cisco

1 product

Firepower Threat Defense Software

Configuration A

76 vulnerable

Vulnerable Software	Affected Versions
Cisco Firepower Threat Defense Software	Version 6.2.3
Cisco Firepower Threat Defense Software	Version 6.4.0.10
Cisco Firepower Threat Defense Software	Version 6.4.0.11
Cisco Firepower Threat Defense Software	Version 6.4.0.12
Cisco Firepower Threat Defense Software	Version 6.4.0.13
Cisco Firepower Threat Defense Software	Version 6.4.0.14
Cisco Firepower Threat Defense Software	Version 6.4.0.15
Cisco Firepower Threat Defense Software	Version 6.4.0.16
Cisco Firepower Threat Defense Software	Version 6.4.0.17
Cisco Firepower Threat Defense Software	Version 6.4.0.18
Cisco Firepower Threat Defense Software	Version 6.4.0.1
Cisco Firepower Threat Defense Software	Version 6.4.0.2
Cisco Firepower Threat Defense Software	Version 6.4.0.3
Cisco Firepower Threat Defense Software	Version 6.4.0.4
Cisco Firepower Threat Defense Software	Version 6.4.0.5
Cisco Firepower Threat Defense Software	Version 6.4.0.6
Cisco Firepower Threat Defense Software	Version 6.4.0.7
Cisco Firepower Threat Defense Software	Version 6.4.0.8
Cisco Firepower Threat Defense Software	Version 6.4.0.9
Cisco Firepower Threat Defense Software	Version 6.4.0
Cisco Firepower Threat Defense Software	Version 7.0.0.1
Cisco Firepower Threat Defense Software	Version 7.0.0
Cisco Firepower Threat Defense Software	Version 7.0.1.1
Cisco Firepower Threat Defense Software	Version 7.0.1
Cisco Firepower Threat Defense Software	Version 7.0.2.1
Cisco Firepower Threat Defense Software	Version 7.0.2
Cisco Firepower Threat Defense Software	Version 7.0.3
Cisco Firepower Threat Defense Software	Version 7.0.4
Cisco Firepower Threat Defense Software	Version 7.0.5
Cisco Firepower Threat Defense Software	Version 7.0.6.1
Cisco Firepower Threat Defense Software	Version 7.0.6.2
Cisco Firepower Threat Defense Software	Version 7.0.6.3
Cisco Firepower Threat Defense Software	Version 7.0.6
Cisco Firepower Threat Defense Software	Version 7.0.7
Cisco Firepower Threat Defense Software	Version 7.0.8.1
Cisco Firepower Threat Defense Software	Version 7.0.8
Cisco Firepower Threat Defense Software	Version 7.1.0.1
Cisco Firepower Threat Defense Software	Version 7.1.0.2
Cisco Firepower Threat Defense Software	Version 7.1.0.3
Cisco Firepower Threat Defense Software	Version 7.1.0
Cisco Firepower Threat Defense Software	Version 7.2.0.1
Cisco Firepower Threat Defense Software	Version 7.2.0
Cisco Firepower Threat Defense Software	Version 7.2.10.2
Cisco Firepower Threat Defense Software	Version 7.2.10
Cisco Firepower Threat Defense Software	Version 7.2.1
Cisco Firepower Threat Defense Software	Version 7.2.2
Cisco Firepower Threat Defense Software	Version 7.2.3
Cisco Firepower Threat Defense Software	Version 7.2.4.1
Cisco Firepower Threat Defense Software	Version 7.2.4
Cisco Firepower Threat Defense Software	Version 7.2.5.1
Cisco Firepower Threat Defense Software	Version 7.2.5.2
Cisco Firepower Threat Defense Software	Version 7.2.5
Cisco Firepower Threat Defense Software	Version 7.2.6
Cisco Firepower Threat Defense Software	Version 7.2.7
Cisco Firepower Threat Defense Software	Version 7.2.8.1
Cisco Firepower Threat Defense Software	Version 7.2.8
Cisco Firepower Threat Defense Software	Version 7.2.9
Cisco Firepower Threat Defense Software	Version 7.3.0
Cisco Firepower Threat Defense Software	Version 7.3.1.1
Cisco Firepower Threat Defense Software	Version 7.3.1.2
Cisco Firepower Threat Defense Software	Version 7.3.1
Cisco Firepower Threat Defense Software	Version 7.4.0
Cisco Firepower Threat Defense Software	Version 7.4.1.1
Cisco Firepower Threat Defense Software	Version 7.4.1
Cisco Firepower Threat Defense Software	Version 7.4.2.1
Cisco Firepower Threat Defense Software	Version 7.4.2.2
Cisco Firepower Threat Defense Software	Version 7.4.2.3
Cisco Firepower Threat Defense Software	Version 7.4.2.4
Cisco Firepower Threat Defense Software	Version 7.4.2
Cisco Firepower Threat Defense Software	Version 7.6.0
Cisco Firepower Threat Defense Software	Version 7.6.1
Cisco Firepower Threat Defense Software	Version 7.6.2.1
Cisco Firepower Threat Defense Software	Version 7.6.2
Cisco Firepower Threat Defense Software	Version 7.7.0
Cisco Firepower Threat Defense Software	Version 7.7.10.1
Cisco Firepower Threat Defense Software	Version 7.7.10

Related CWEs

CWE-476

NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

References (1)

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-cmd-inj-mTzGZexf

Source: psirt@cisco.com

Vendor Advisory

Timeline

No history available yet.