CVE-2026-20052General(cisco / secure_firewall_threat_defense)

LOWCVSS 5.8 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability in the memory management handling for the Snort 3 Detection Engine of Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart. This vulnerability is due to a logic error in memory management when a device is performing Snort 3 SSL packet inspection. An attacker could exploit this vulnerability by sending crafted SSL packets through an established connection to be parsed by the Snort 3 Detection Engine. A successful exploit could allow the attacker to cause a denial of service (DoS) condition when the Snort 3 Detection Engine unexpectedly restarts.

cisco CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-snort3ssl-FBEKYXpH

Weakness type (CWE)

CWE-788

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

secure_firewall_threat_defense

Threat summary

1 mentions across 1 observed day

What's happening

General: 1 classified signal
1 total mentions across 1 day

Affected systems

Vendors

cisco

Products

secure_firewall_threat_defense

6 versions affected across 1 product

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

General

1100.0%

Referenced assets1 URL

By indicator

https://www.cve.org/CVERecord?id=CVE-2026-20052

Full discourse1 post

CVE@CVEnew218d
General
CVE-2026-20052 A vulnerability in the memory management handling for the Snort 3 Detection Engine of Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticat… https://www.cve.org/CVERecord?id=CVE-2026-20052
Post summary
The post simply references CVE-2026-20052 and links to its CVE record, without providing any proof of concept, exploit details, patch information, technical specifics, or evidence of active exploitation.
00000102
56.6K followersView on X

CPE platform detail6 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

6 of 6 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	cisco	secure_firewall_threat_defense	7.4.0	-	-
App	cisco	secure_firewall_threat_defense	7.4.1	-	-
App	cisco	secure_firewall_threat_defense	7.4.1.1	-	-
App	cisco	secure_firewall_threat_defense	7.4.2	-	-
App	cisco	secure_firewall_threat_defense	7.4.2.1	-	-
App	cisco	secure_firewall_threat_defense	7.6.0	-	-

Explore more

Back to dashboard cisco CVEs secure_firewall_threat_defense vulnerabilities