CVE-2026-20064

תיאור (מקור, אנגלית)

A vulnerability in of Cisco Secure Firewall Threat Defense (FTD) Software could allow an authenticated, local attacker to cause the device to unexpectedly reload, causing a denial of service (DoS) condition. This vulnerability is due to improper validation of user-supplied input. An attacker with a low-privileged account could exploit this vulnerability by using crafted commands at the CLI prompt. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition.

מדדים

CVSS 3.1

6.5 (MEDIUM) מקור הציון: CNA CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

EPSS — סבירות ניצול

0% (אחוזון 000) נכון ל-23/9/2026

CWE

CWE-476

מוצרים מושפעים

cisco: secure firewall threat defense

קישורים

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/‮… Vendor Advisory