PT-2026-23016 · Cisco · Cisco Secure Firewall Threat Defense (Ftd)

Published 2026-03-04 · Updated 2026-03-04 · CVE-2026-20050

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Cisco Secure Firewall Threat Defense (FTD) Software (affected versions not specified)

Description A flaw exists in the Do Not Decrypt exclusion feature of the SSL decryption functionality. This issue could allow a remote, unauthenticated attacker to trigger a denial of service (DoS) condition on a vulnerable device. The root cause is improper memory management when examining TLS 1.2 encrypted traffic. An attacker can exploit this by sending specifically crafted TLS 1.2 encrypted traffic to the device, potentially causing it to reload. This vulnerability only impacts traffic encrypted using TLS 1.2; other TLS versions are not affected.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Resource Release

Weakness Enumeration

CWE-404

Related Identifiers

CVE-2026-20050

Affected Products

Cisco Secure Firewall Threat Defense (Ftd)

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-20050 · Security Note
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-dnd-dos-bpEcg7B7 · Vendor Advisory
• https://twitter.com/CVEnew/status/2029272794152800664 · Twitter Post