Cisco
Secure Firewall Threat Defense (FTD) vulnerabilities (CVE): affected branches, fixed releases, CISA KEV
Affected branches, fixed releases stated by the vendor and known exploitation for Cisco Secure Firewall Threat Defense (FTD).
Sources last modified 16 Sept 2026 · Last verified by Patcharo: 1 Oct 2026 at 13:37 UTC
- 7
- CVEs tracked
- 2
- Critical
- 7
- CISA KEV
- 1
- With a fixed release
Versions by branch
Per branch: the newest release the vendor lists, what the vendor recommends and for whom, the support state and when Patcharo last verified each fact. Three facts read from the vendor's documents and shown apart: the newest release is not a recommendation.
The vendor marks its suggested releases in its software download portal (sign-in required), which Patcharo does not read: nothing here is a recommendation.
9 branches shown
- 7.7Not collectedLatest public release
No release listed in the sources Patcharo reads
Vendor recommendationThe vendor marks its suggested releases in its software download portal (sign-in required), which Patcharo does not read: nothing here is a recommendation.
SupportSupported · until 30 Sept 2028Vulnerabilities2 CVEs · 2 KEVnewest fix 7.7.13 - 7.3Not collectedLatest public release
No release listed in the sources Patcharo reads
Vendor recommendationThe vendor marks its suggested releases in its software download portal (sign-in required), which Patcharo does not read: nothing here is a recommendation.
SupportSupported · until 30 Nov 2027Vulnerabilities7 CVEs · 7 KEV - 7.2Not collectedLatest public release
No release listed in the sources Patcharo reads
Vendor recommendationThe vendor marks its suggested releases in its software download portal (sign-in required), which Patcharo does not read: nothing here is a recommendation.
SupportSupported · until 30 Nov 2027Vulnerabilities7 CVEs · 7 KEVnewest fix 7.2.12 - 7.0Not collectedLatest public release
No release listed in the sources Patcharo reads
Vendor recommendationThe vendor marks its suggested releases in its software download portal (sign-in required), which Patcharo does not read: nothing here is a recommendation.
SupportSupported · until 30 Nov 2027Vulnerabilities7 CVEs · 7 KEVnewest fix 7.0.10 - 7.1Not collectedLatest public release
No release listed in the sources Patcharo reads
Vendor recommendationThe vendor marks its suggested releases in its software download portal (sign-in required), which Patcharo does not read: nothing here is a recommendation.
SupportEnd of life · until 31 Dec 2025Vulnerabilities6 CVEs · 6 KEV - 6.7Not collectedLatest public release
No release listed in the sources Patcharo reads
Vendor recommendationThe vendor marks its suggested releases in its software download portal (sign-in required), which Patcharo does not read: nothing here is a recommendation.
SupportEnd of life · until 31 Jul 2024Vulnerabilities4 CVEs · 4 KEV - 6.6Not collectedLatest public release
No release listed in the sources Patcharo reads
Vendor recommendationThe vendor marks its suggested releases in its software download portal (sign-in required), which Patcharo does not read: nothing here is a recommendation.
SupportEnd of life · until 31 Mar 2025Vulnerabilities6 CVEs · 6 KEV - 6.5Not collectedLatest public release
No release listed in the sources Patcharo reads
Vendor recommendationThe vendor marks its suggested releases in its software download portal (sign-in required), which Patcharo does not read: nothing here is a recommendation.
SupportEnd of life · until 30 Jun 2023Vulnerabilities0 CVEs - 6.4Not collectedLatest public release
No release listed in the sources Patcharo reads
Vendor recommendationThe vendor marks its suggested releases in its software download portal (sign-in required), which Patcharo does not read: nothing here is a recommendation.
SupportEnd of life · until 28 Feb 2026Vulnerabilities6 CVEs · 6 KEV
Last successful check against the source. The content may be unchanged. Checked about every 6 hours (192 hours for a branch past its support); “page verified recently” means a successful check within the last 24 hours. Availability, recommendation and support are read from the vendor's documents and shown apart; a release Patcharo lists is not advice to install it.
Vulnerability history
Every CVE NVD attaches to Secure Firewall Threat Defense (FTD) over the period, whatever its score: published records only, rejected identifiers kept apart. Counts are publication counts.
Last 12 months · 14 Nov 2025 – 14 Nov 2026 · Rolling calendar period, by publication date of the CVE record; both days included.
The history could not be read right now. The list below shows the analysed catalog only.
Verified history · History not collected yet: the counts above are not a measure.
Scores and statuses are the facts known today, not their history.
CVEs published over the period
14 Nov 2025 – 14 Nov 2026 · Newest first. A record analysed by Patcharo links to its page with affected and fixed releases; the others show NVD's facts.
The history could not be read right now. The list below shows the analysed catalog only.
Analysed vulnerabilities
- CVE-2026-20349Published: High8.6CVSS 3.1, HighKEVDue 14 Aug 2026EPSS1%
Cisco Secure Firewall ASA, Cisco Secure Firewall Threat Defense (FTD)
- CVE-2025-20362Published: High8.6CVSS 3.1, HighKEVDue 26 Sept 2025EPSS87%
Cisco Secure Firewall ASA, Cisco Secure Firewall Threat Defense (FTD)
- CVE-2025-20333Published: Critical9.9CVSS 3.1, CriticalKEVDue 26 Sept 2025EPSS71%
Cisco Secure Firewall ASA, Cisco Secure Firewall Threat Defense (FTD)
- CVE-2024-20481Published: Medium5.8CVSS 3.1, MediumKEVDue 14 Nov 2024EPSS16%
Cisco ASA and FTD Denial-of-Service Vulnerability
Cisco Secure Firewall ASA, Cisco Secure Firewall Threat Defense (FTD)
- CVE-2024-20359Published: Medium6CVSS 3.1, MediumKEVDue 1 May 2024EPSS19%
Cisco ASA and FTD Privilege Escalation Vulnerability
Cisco Secure Firewall ASA, Cisco Secure Firewall Threat Defense (FTD)
- CVE-2024-20353Published: High8.6CVSS 3.1, HighKEVDue 1 May 2024EPSS71%
Cisco ASA and FTD Denial of Service Vulnerability
Cisco Secure Firewall ASA, Cisco Secure Firewall Threat Defense (FTD)
- CVE-2023-20269Published: Critical9.1CVSS 3.1, CriticalKEVRansomwareDue 4 Oct 2023EPSS25%
Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability
Cisco Secure Firewall ASA, Cisco Secure Firewall Threat Defense (FTD)
Vendor recommendation
The vendor's own statement about what to run, with its date and source. Separate from vulnerabilities and from support status: being behind a recommendation is not a vulnerability, and a supported release is not necessarily the recommended one.
Cisco publishes no recommended-release page Patcharo can read. The fixed releases on this site come from the security advisories only; nothing is inferred from version numbers.
CERT-FR
Advisories and alerts of the French national CERT referencing the CVEs of this product.
- Advisory (AVI)CERTFR-2026-AVI-1010Vulnerability in Cisco productsPublished 12 Aug 2026
- Alert (ALE)CERTFR-2025-ALE-013[Update] Multiple vulnerabilities in Cisco ASA and FTDPublished 25 Sept 2025 · updated 9 Dec 2025 · closed 9 Dec 2025
- Advisory (AVI)CERTFR-2025-AVI-0819Multiple vulnerabilities in Cisco productsPublished 25 Sept 2025
- Advisory (AVI)CERTFR-2024-AVI-0919Multiple vulnerabilities in Cisco productsPublished 24 Oct 2024
Some titles in this list are machine-translated by artificial intelligence (Mistral AI) from the source texts; each record shows the original.