Local Denial of Service Vulnerability in Cisco Secure Firewall Threat Defense Software

CVE-2026-20064

What is CVE-2026-20064?

A vulnerability has been identified in Cisco Secure Firewall Threat Defense Software that permits an authenticated, local attacker to induce an unexpected device reload, which leads to a denial of service (DoS) condition. This weakness arises from insufficient validation of user-supplied input. An attacker with a low-privileged account may exploit this issue by executing specially crafted commands through the command-line interface (CLI). A successful attack can result in the device becoming unresponsive due to the reload, affecting network availability.

References