Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

277 records

Priority CRITICAL 94KEV

A vulnerability in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote atta…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00821 Published 2026-10-28 No fix listed CWE-690
Priority CRITICAL 94KEV

A vulnerability in the Remote Access SSL VPN service for Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote att…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.0101 Published 2026-08-11 No fix listed CWE-244
TI-2026-16230 CVE-2026-20012 · GHSA-5cpj-j8xh-5rgh

Memory leak in Cisco IOS

Priority MEDIUM 43

A vulnerability in the Internet Key Exchange version 2 (IKEv2) feature of Cisco IOS Software, Cisco IOS XE Software, Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, and Cisco Secure Firewall Threat Defe…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.0036 Published 2026-03-25 No fix listed CWE-401
Priority LOW 28

A vulnerability in of Cisco Secure Firewall Threat Defense (FTD) Software could allow an authenticated, local attacker to cause the device to unexpectedly reload, causing a denial of service (DoS) condition.

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.00109 Published 2026-03-04 No fix listed CWE-476
Priority LOW 29

A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an authenticated, adjacent attacker to cause an affected device to reload unexpectedly, resulting in a…

CVSS 3.1MEDIUM 6.8 Adjacent network Low privileges No interaction EPSS 0.00182 Published 2026-03-04 No fix listed CWE-190
Priority LOW 29

A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an authenticated, adjacent attacker to cause an affected device to reload unexpectedly, resulting in a…

CVSS 3.1MEDIUM 6.8 Adjacent network Low privileges No interaction EPSS 0.00208 Published 2026-03-04 No fix listed CWE-119
Priority LOW 28

A vulnerability in the OSPF protocol of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, adjacent attacker to corrup…

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00169 Published 2026-03-04 No fix listed CWE-787
Priority LOW 28

A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, adjacent attacker to cause an affected device to reload unexpectedly, resulting in…

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00209 Published 2026-03-04 No fix listed CWE-823
Priority LOW 19

A vulnerability in the OSPF protocol of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an authenticated, adjacent attacker to exhaust…

CVSS 3.1MEDIUM 4.3 Adjacent network No auth No interaction EPSS 0.00221 Published 2026-03-04 No fix listed CWE-401
Priority LOW 30

A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, adjacent attacker to cause an affected device to reload unexpectedly, resulting in…

CVSS 3.1MEDIUM 6.8 Adjacent network Low privileges No interaction EPSS 0.0027 Published 2026-03-04 No fix listed CWE-20
Priority LOW 32

A vulnerability in the Cisco FXOS Software CLI feature for Cisco Secure Firewall ASA Software and Secure FTD Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating…

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00369 Published 2026-03-04 No fix listed CWE-88
Priority LOW 32

A vulnerability in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to send traffic that should be d…

CVSS 3.1MEDIUM 5.8 Network No auth No interaction EPSS 0.0043 Published 2026-03-04 No fix listed CWE-284
Priority LOW 27

A vulnerability in the SAML 2.0 single sign-on (SSO) feature of Cisco Secure Firewall ASA Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct a cros…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00307 Published 2026-03-04 No fix listed CWE-79
Priority LOW 27

A vulnerability in the VPN web services component of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacke…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00305 Published 2026-03-04 No fix listed CWE-80
Priority LOW 20

A vulnerability in the VPN web services component of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacke…

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00316 Published 2026-03-04 No fix listed CWE-444
Priority LOW 32

Multiple Cisco products are affected by a vulnerability in the Snort 3 detection engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption…

CVSS 3.1MEDIUM 5.8 Network No auth No interaction EPSS 0.0047 Published 2026-03-04 No fix listed CWE-248
Priority LOW 33

Multiple Cisco products are affected by a vulnerability in the Snort 3 detection engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption…

CVSS 3.1MEDIUM 5.8 Network No auth No interaction EPSS 0.00516 Published 2026-03-04 No fix listed CWE-787
Priority LOW 33

Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption…

CVSS 3.1MEDIUM 5.8 Network No auth No interaction EPSS 0.00516 Published 2026-03-04 No fix listed CWE-400
Priority LOW 32

Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption…

CVSS 3.1MEDIUM 5.8 Network No auth No interaction EPSS 0.00408 Published 2026-03-04 No fix listed CWE-667
Priority LOW 33

Multiple Cisco products are affected by a vulnerability in the Snort 3 Visual Basic for Applications (VBA) feature which could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to crash.&nbs…

CVSS 3.1MEDIUM 5.8 Network No auth No interaction EPSS 0.00487 Published 2026-03-04 No fix listed CWE-369
TI-2026-16268 CVE-2026-20054 · GHSA-ppp5-3mr9-mww7

Infinite loop in Cisco Cyber Vision

Priority LOW 33

Multiple Cisco products are affected by a vulnerability in the Snort 3 VBA feature that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to crash.  This vulnerability is due to i…

CVSS 3.1MEDIUM 5.8 Network No auth No interaction EPSS 0.00487 Published 2026-03-04 No fix listed CWE-835
Priority LOW 26

Multiple Cisco products are affected by a vulnerability in the Snort 3 VBA feature that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to crash.

CVSS 3.1MEDIUM 5.8 Network No auth No interaction EPSS 0.00466 Published 2026-03-04 No fix listed CWE-122
Priority LOW 32

A vulnerability in the memory management handling for the Snort 3 Detection Engine of Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Eng…

CVSS 3.1MEDIUM 5.8 Network No auth No interaction EPSS 0.00465 Published 2026-03-04 No fix listed CWE-788
Priority LOW 30

A vulnerability in the Do Not Decrypt exclusion feature of the SSL decryption feature of Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (D…

CVSS 3.1MEDIUM 6.8 Network No auth No interaction EPSS 0.00428 Published 2026-03-04 No fix listed CWE-404
Load more