Cisco Secure Firewall Threat Defense

productDE

cpe:/a:cisco:secure_firewall_threat_defense:-

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

1critical1high5medium0low

updated 2026-10-26

vulnerabilities (70)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-20362US	high8.6OT critical	87.1% (100th)	KEV	no fix	2025-09-25	—
CVE-2025-20333US	—OT critical	71.2% (99th)	KEV	no fix	2025-09-25	—
CVE-2026-20349US	—OT critical	1.01% (63rd)	KEV	no fix	2026-08-11	—
CVE-2025-20363US	—	6.92% (94th)	—	no fix	2025-09-25	—
CVE-2025-20133US	—	0.78% (55th)	—	no fix	2025-08-14	—
CVE-2025-20225US	—	0.71% (53rd)	—	no fix	2025-08-14	—
CVE-2025-20224US	—	0.71% (53rd)	—	no fix	2025-08-14	—
CVE-2025-20263US	—	0.68% (52nd)	—	no fix	2025-08-14	—
CVE-2025-20127US	—	0.67% (51st)	—	no fix	2025-08-14	—
CVE-2025-20222US	—	0.64% (50th)	—	no fix	2025-08-14	—
CVE-2025-20136US	—	0.64% (50th)	—	no fix	2025-08-14	—
CVE-2025-20239US	—	0.62% (49th)	—	no fix	2025-08-14	—
CVE-2025-20243US	—	0.61% (49th)	—	no fix	2025-08-14	—
CVE-2025-20244US	—	0.54% (45th)	—	no fix	2025-08-14	—
CVE-2026-20005US	—	0.52% (43rd)	—	no fix	2026-03-04	—
CVE-2026-20067US	—	0.48% (41st)	—	no fix	2026-03-04	—
CVE-2026-20066US	—	0.48% (41st)	—	no fix	2026-03-04	—
CVE-2025-20268US	—	0.48% (41st)	—	no fix	2025-08-14	—
CVE-2025-20359US	critical9.1	0.48% (41st)	—	no fix	2025-10-15	—
CVE-2025-20253US	—	0.47% (40th)	—	no fix	2025-08-14	—
CVE-2025-20251US	—	0.47% (40th)	—	no fix	2025-08-14	—
CVE-2026-20057US	—	0.46% (39th)	—	no fix	2026-03-04	—
CVE-2026-20054US	—	0.46% (39th)	—	no fix	2026-03-04	—
CVE-2026-20018US	—	0.45% (38th)	—	no fix	2026-03-04	—
CVE-2026-20068US	—	0.44% (37th)	—	no fix	2026-03-04	—
CVE-2026-20053US	—	0.44% (37th)	—	no fix	2026-03-04	—
CVE-2026-20052US	—	0.44% (37th)	—	no fix	2026-03-04	—
CVE-2025-20254US	—	0.43% (37th)	—	no fix	2025-08-14	—
CVE-2025-20252US	—	0.43% (37th)	—	no fix	2025-08-14	—
CVE-2025-20134US	—	0.42% (35th)	—	no fix	2025-08-14	—
CVE-2026-20058US	—	0.41% (35th)	—	no fix	2026-03-04	—
CVE-2026-20073US	—	0.40% (34th)	—	no fix	2026-03-04	—
CVE-2026-20050US	—	0.40% (33rd)	—	no fix	2026-03-04	—
CVE-2026-20006US	—	0.40% (33rd)	—	no fix	2026-03-04	—
CVE-2026-20065US	—	0.39% (32nd)	—	no fix	2026-03-04	—
CVE-2025-20219US	—	0.38% (31st)	—	no fix	2025-08-14	—
CVE-2025-20360US	—	0.38% (31st)	—	no fix	2025-10-15	—
CVE-2026-20039US	—	0.37% (30th)	—	no fix	2026-03-04	—
CVE-2026-20101US	—OT elevated	0.37% (30th)	—	no fix	2026-03-04	—
CVE-2026-20103US	—	0.36% (29th)	—	no fix	2026-03-04	—
CVE-2026-20012US	—	0.36% (29th)	—	no fix	2026-03-25	—
CVE-2026-20016US	medium6.7	0.35% (27th)	—	no fix	2026-03-04	—
CVE-2026-20106US	—	0.34% (26th)	—	no fix	2026-03-04	—
CVE-2026-20105US	—	0.33% (25th)	—	no fix	2026-03-04	—
CVE-2026-20015US	—	0.32% (24th)	—	no fix	2026-03-04	—
CVE-2026-20013US	—	0.32% (24th)	—	no fix	2026-03-04	—
CVE-2026-20049US	—	0.30% (22nd)	—	no fix	2026-03-04	—
CVE-2026-20014US	—	0.30% (22nd)	—	no fix	2026-03-04	—
CVE-2026-20100US	—	0.30% (22nd)	—	no fix	2026-03-04	—
CVE-2026-20069US	—	0.29% (21st)	—	no fix	2026-03-04	—

showing 50 of 70

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-401Missing Release of Memory after Effective Lifetime14 CVEs
CWE-250Execution with Unnecessary Privileges4 CVEs
CWE-835Loop with Unreachable Exit Condition ('Infinite Loop')4 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')3 CVEs
CWE-284Improper Access Control3 CVEs
CWE-122Heap-based Buffer Overflow2 CVEs
CWE-1287Improper Validation of Specified Type of Input2 CVEs
CWE-244Improper Clearing of Heap Memory Before Release ('Heap Inspection')2 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)70 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan