Skip to content
Sign in
6.0 Medium

CVE-2026-20016 A vulnerability in the Cisco FXOS Software CLI feature for Cisco Secure Firewall ASA Software and Secure FTD Software…

Description

A vulnerability in the Cisco FXOS Software CLI feature for Cisco Secure Firewall ASA Software and Secure FTD Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system with root-level privileges. To exploit this vulnerability, the attacker must have valid administrative credentials on an affected device. This vulnerability is due to insufficient input validation of user-supplied command arguments. An attacker could exploit this vulnerability by submitting crafted input for specific CLI commands. A successful exploit could allow the attacker to execute commands on the underlying operating system with root-level privileges.

Affected products and versions

Product Affected versions Fixed in
Cisco Secure Firewall Threat Defense (FTD) Software 7.7 7.7.0 → 7.7.10.1 No fix stated
Cisco Secure Firewall Threat Defense (FTD) Software 7.6 7.6.0 → 7.6.2.1 No fix stated
Cisco Secure Firewall Threat Defense (FTD) Software 7.4 7.4.1 → 7.4.3 No fix stated
Cisco Secure Firewall Threat Defense (FTD) Software 7.3 7.3.0 → 7.3.1.2 No fix stated
Cisco Secure Firewall Threat Defense (FTD) Software 7.2 7.2.0 → 7.2.10.2 No fix stated
Cisco Secure Firewall Threat Defense (FTD) Software 7.1 7.1.0 → 7.1.0.3 No fix stated
Cisco Secure Firewall Threat Defense (FTD) Software 7.0 7.0.0 → 7.0.8.1 No fix stated

Other CVEs of Cisco Secure Firewall Threat Defense (FTD) Software

The 81 CVEs of Cisco Secure Firewall Threat Defense (FTD) Software →
CVE-2026-76418 Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability 8.6 High CVE-2026-76489 Multiple Cisco products are affected by a vulnerability in the memory management implementation of Snort 3 that could… 5.8 Medium CVE-2026-76445 Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an… 5.3 Medium CVE-2026-20356 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3… 7.5 High
Track this CVE