Skip to content
CVE PROGRAM SOURCE RECORD8.6 High

CVE-2026-20295

Cisco Secure Firewall Management Center and Secure Firewall Threat Defense Software sftunnel Memory Exhaustion Denial of Service Vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
cisco

Description

A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure FMC Software and Cisco Secure FTD Software could allow an unauthenticated, remote attacker to exhaust the available memory of an affected device. This vulnerability is due to improper management of memory resources during sftunnel TLS connection setup. An attacker could exploit this vulnerability by sending crafted sftunnel TLS frames to an affected device during the connection setup. A successful exploit could allow the attacker to exhaust the available memory on the affected device, which could result in a DoS condition.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Cisco Cisco Secure Firewall Management Center (FMC)

Default version status: unknown

  • 7.0.0affected
  • 7.0.0.1affected
  • 7.0.1affected
  • 7.0.1.1affected
  • 7.0.2affected
  • 7.2.0affected
  • 7.0.2.1affected
  • 7.0.3affected
  • 7.2.0.1affected
  • 7.0.4affected
  • 7.2.1affected
  • 7.0.5affected
  • 7.3.0affected
  • 7.2.2affected
  • 7.3.1affected
  • 7.2.3affected
  • 7.2.3.1affected
  • 7.2.4affected
  • 7.0.6affected
  • 7.2.4.1affected
  • 7.2.5affected
  • 7.3.1.1affected
  • 7.4.0affected
  • 7.0.6.1affected
  • 7.2.5.1affected
  • 7.4.1affected
  • 7.2.6affected
  • 7.4.1.1affected
  • 7.0.6.2affected
  • 7.2.7affected
  • 7.2.5.2affected
  • 7.3.1.2affected
  • 7.2.8affected
  • 7.6.0affected
  • 7.4.2affected
  • 7.2.8.1affected
  • 7.0.6.3affected
  • 7.4.2.1affected
  • 7.2.9affected
  • 7.0.7affected
  • 7.7.0affected
  • 7.4.2.2affected
  • 7.2.10affected
  • 7.6.1affected
  • 7.4.2.3affected
  • 7.0.8affected
  • 7.6.2affected
  • 7.7.10affected
  • 7.2.10.1affected
  • 7.0.8.1affected
  • 7.6.2.1affected
  • 7.2.10.2affected
  • 7.7.10.1affected
  • 7.4.2.4affected
  • 7.4.3affected
  • 7.6.3affected
  • 7.7.11affected
  • 7.6.4affected
  • 10.0.0affected
  • 7.4.4affected
  • 7.4.5affected
  • 7.0.9affected
  • 7.2.11affected
  • 7.7.12affected
  • 7.6.5affected
  • 7.4.6affected
  • 10.0.1affected

Cisco Cisco Secure Firewall Threat Defense (FTD) Software

Default version status: unknown

  • 7.0.0affected
  • 7.0.0.1affected
  • 7.0.1affected
  • 7.0.1.1affected
  • 7.0.2affected
  • 7.2.0affected
  • 7.0.2.1affected
  • 7.0.3affected
  • 7.2.0.1affected
  • 7.0.4affected
  • 7.2.1affected
  • 7.0.5affected
  • 7.3.0affected
  • 7.2.2affected
  • 7.2.3affected
  • 7.3.1affected
  • 7.2.4affected
  • 7.0.6affected
  • 7.2.5affected
  • 7.2.4.1affected
  • 7.3.1.1affected
  • 7.4.0affected
  • 7.0.6.1affected
  • 7.2.5.1affected
  • 7.4.1affected
  • 7.2.6affected
  • 7.0.6.2affected
  • 7.4.1.1affected
  • 7.2.7affected
  • 7.2.5.2affected
  • 7.3.1.2affected
  • 7.2.8affected
  • 7.6.0affected
  • 7.4.2affected
  • 7.2.8.1affected
  • 7.0.6.3affected
  • 7.4.2.1affected
  • 7.2.9affected
  • 7.0.7affected
  • 7.7.0affected
  • 7.4.2.2affected
  • 7.2.10affected
  • 7.6.1affected
  • 7.4.2.3affected
  • 7.0.8affected
  • 7.6.2affected
  • 7.7.10affected
  • 7.7.11affected
  • 7.0.8.1affected
  • 7.6.2.1affected
  • 7.7.10.1affected
  • 7.4.2.4affected
  • 7.2.10.2affected
  • 7.4.3affected
  • 7.6.4affected
  • 10.0.0affected
  • 7.4.4affected
  • 7.0.9affected
  • 7.2.11affected

References