ZeroDay Findings
Sign inSign up

Findings

CVE-2026-20064

A vulnerability in of Cisco Secure Firewall Threat Defense (FTD) Software could allow an authenticated, local attacker to cause the device to unexpectedly reload, caus…

Published Mar 4, 2026 · updated Aug 11, 2026 · cisco secure firewall threat defense

A vulnerability in of Cisco Secure Firewall Threat Defense (FTD) Software could allow an authenticated, local attacker to cause the device to unexpectedly reload, causing a denial of service (DoS) condition. This vulnerability is due to improper validation of user-supplied input. An attacker with a low-privileged account could exploit this vulnerability by using crafted commands at the CLI prompt. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Mar 4, 2026 · NIST NVD

    Detected

    A vulnerability in of Cisco Secure Firewall Threat Defense (FTD) Software could allow an authenticated, local attacker to cause the device to unexpectedly reload, causing a denial of service (DoS) condition. This vulnerability is due to improper validation of user-supplied input. An attacker with a low-privileged account could exploit this vulnerability by using crafted commands at the CLI prompt.

  2. Aug 11, 2026 · NIST NVD

    Updated

    A vulnerability in of Cisco Secure Firewall Threat Defense (FTD) Software could allow an authenticated, local attacker to cause the device to unexpectedly reload, causing a denial of service (DoS) condition. This vulnerability is due to improper validation of user-supplied input. An attacker with a low-privileged account could exploit this vulnerability by using crafted commands at the CLI prompt.

Affected

  • cpe cisco/secure firewall threat defense6.2.3
  • cpe cisco/secure firewall threat defense6.4.0
  • cpe cisco/secure firewall threat defense6.4.0.1
  • cpe cisco/secure firewall threat defense6.4.0.2
  • cpe cisco/secure firewall threat defense6.4.0.3
  • cpe cisco/secure firewall threat defense6.4.0.4
  • cpe cisco/secure firewall threat defense6.4.0.5
  • cpe cisco/secure firewall threat defense6.4.0.6

Sources

  • NIST NVDVulnerability recordCVE-2026-20064

    A vulnerability in of Cisco Secure Firewall Threat Defense (FTD) Software could allow an authenticated, local attacker to cause the device to unexpectedly reload, causing a denial of service (DoS) condition. This vulnerability is due to improper validation of user-supplied inp

    nvd.nist.gov

References