CVE-2026-20295

🗓️ 16 Sep 2026 21:17:09Reported by [email protected]Type

Unauthenticated remote DoS in Cisco Secure FMC and FTD via crafted sftunnel TLS frames.

Reporter	Title	Published	Views	Family All 10
BDU FSTEC	The vulnerabilities of the Cisco Secure Firewall Management Center (formerly known as Cisco Firepower Management Center) and the Cisco Secure Firewall Threat Defense (FTD) software are related to uncontrolled memory allocation. This allows attackers to bypass existing security mechanisms or cause service interruptions.	23 Sep 202600:00	–	bdu_fstec
Cisco	Cisco Secure Firewall Management Center and Secure Firewall Threat Defense Software sftunnel Vulnerabilities	16 Sep 202616:00	–	cisco
Tenable Nessus	Cisco Secure Firewall Threat Defense Software sftunnel Authentication Bypass (cisco-sa-fmcftd-sftun-multivulns-WGVHOrN3)	18 Sep 202600:00	–	nessus
Tenable Nessus	Cisco Secure Firewall Management Center Software sftunnel Authentication Bypass (cisco-sa-fmcftd-sftun-multivulns-WGVHOrN3)	18 Sep 202600:00	–	nessus
CVE	CVE-2026-20295	16 Sep 202620:09	–	cve
Cvelist	CVE-2026-20295 Cisco Secure Firewall Management Center and Secure Firewall Threat Defense Software sftunnel Memory Exhaustion Denial of Service Vulnerability	16 Sep 202620:09	–	cvelist
EUVD	EUVD-2026-81113	16 Sep 202620:09	–	euvd
Positive Technologies	PT-2026-93975	16 Sep 202600:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2026-20295: Memory Allocation with Excessive Size Value	16 Sep 202600:00	–	rapid7
Vulnrichment	CVE-2026-20295 Cisco Secure Firewall Management Center and Secure Firewall Threat Defense Software sftunnel Memory Exhaustion Denial of Service Vulnerability	16 Sep 202620:09	–	vulnrichment