PT-2026-23016 · Cisco · Cisco Secure Firewall Threat Defense (Ftd)

CVE-2026-20050 · Publicado 2026-03-04 · Atualizado 2026-03-04

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Média

Vetor base

AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Cisco Secure Firewall Threat Defense (FTD) Software (affected versions not specified)

Description A flaw exists in the Do Not Decrypt exclusion feature of the SSL decryption functionality. This issue could allow a remote, unauthenticated attacker to trigger a denial of service (DoS) condition on a vulnerable device. The root cause is improper memory management when examining TLS 1.2 encrypted traffic. An attacker can exploit this by sending specifically crafted TLS 1.2 encrypted traffic to the device, potentially causing it to reload. This vulnerability only impacts traffic encrypted using TLS 1.2; other TLS versions are not affected.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Resource Release

Enumeração de Fraquezas

CWE-404

Identificadores relacionados

CVE-2026-20050

Produtos afetados

Cisco Secure Firewall Threat Defense (Ftd)

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-20050 · Nota de Segurança
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-dnd-dos-bpEcg7B7 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/2029272794152800664 · Publicação no Twitter