Local Denial of Service Vulnerability in Cisco Secure Firewall Threat Defense Software
CVE-2026-20064
What is CVE-2026-20064?
A vulnerability has been identified in Cisco Secure Firewall Threat Defense Software that permits an authenticated, local attacker to induce an unexpected device reload, which leads to a denial of service (DoS) condition. This weakness arises from insufficient validation of user-supplied input. An attacker with a low-privileged account may exploit this issue by executing specially crafted commands through the command-line interface (CLI). A successful attack can result in the device becoming unresponsive due to the reload, affecting network availability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Cisco Secure Firewall Threat Defense (FTD) Software 6.4.0
Cisco Secure Firewall Threat Defense (FTD) Software 6.4.0.1
Cisco Secure Firewall Threat Defense (FTD) Software 6.4.0.3
References
CVSS V3.1
Timeline
- ๐พ
Exploit known to exist
Vulnerability published
Vulnerability Reserved